0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))

17:35:05 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0xd}, 0x0)

17:35:05 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x1}], 0x1}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

17:35:05 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x10}, 0x0)

17:35:05 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r3, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 1885.391599][T20927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1885.438724][T20932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:35:05 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x11}, 0x0)

[ 1885.497336][T20927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1885.569538][T20932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:35:05 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0xe}, 0x0)

[ 1885.660921][T21013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1885.709072][T21033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1885.731254][T21013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:35:06 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x12}, 0x0)

[ 1885.828179][T20985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:35:06 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{0x0}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x1}], 0x1}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

17:35:06 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r4, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r5, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:35:06 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r3, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:35:06 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r4, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))

17:35:06 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0xf}, 0x0)

17:35:06 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x25}, 0x0)

[ 1886.576395][T21054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1886.689276][T21054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1886.738628][T21062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1886.757519][T21085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:35:07 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x60}, 0x0)

[ 1886.853307][T21098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1886.888079][T21085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1886.913231][T21062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:35:07 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x10}, 0x0)

17:35:07 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{0x0}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x1}], 0x1}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

[ 1887.079319][T21062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:35:07 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x300}, 0x0)

17:35:07 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r4, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r5, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:35:07 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r4, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))

17:35:07 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x11}, 0x0)

17:35:07 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r3, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:35:08 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{0x0}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x1}], 0x1}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

17:35:08 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x500}, 0x0)

[ 1887.943799][T21181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1887.982955][T21178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1888.097447][T21187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1888.124158][T21178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:35:08 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x12}, 0x0)

[ 1888.237062][T21189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1888.271050][T21185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1888.309196][T21193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:35:08 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x1}], 0x1}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

17:35:08 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x600}, 0x0)

[ 1888.511181][T21185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:35:08 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r4, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))

17:35:09 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r4, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r5, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:35:09 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x13}, 0x0)

17:35:09 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x700}, 0x0)

17:35:09 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x1}], 0x1}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

17:35:09 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r3, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 1889.257396][T21207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1889.277776][T21206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1889.450713][T21216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1889.500831][T21207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:35:09 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x900}, 0x0)

[ 1889.651504][T21218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:35:10 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x24}, 0x0)

[ 1889.830888][T21218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:35:10 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0xa00}, 0x0)

17:35:10 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r4, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r5, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 1890.014759][T21314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:35:10 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r4, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:35:10 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x1}], 0x1}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

17:35:10 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x25}, 0x0)

17:35:10 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0xb00}, 0x0)

17:35:10 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r3, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 1890.548647][T21332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1890.625545][T21333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:35:11 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0xc00}, 0x0)

[ 1890.726155][T21339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:35:11 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x2f}, 0x0)

[ 1890.902221][T21333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:35:11 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0xd00}, 0x0)

[ 1891.178651][T21354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:35:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r4, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r5, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:35:11 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x3a}, 0x0)

17:35:11 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x0, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

[ 1891.399939][T21354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:35:11 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r4, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:35:12 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0xe00}, 0x0)

[ 1891.786717][T21352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1891.804738][T21459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:35:12 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x48}, 0x0)

[ 1891.980548][T21459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1892.001861][T21515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1892.126434][T21515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:35:12 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x0, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

[ 1892.211353][T21565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:35:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r4, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r5, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 1892.486013][T19455] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1892.675184][T19455] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1892.873443][T19455] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1892.984376][T21595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1893.137985][T19455] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1893.214956][T21607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1895.072409][T19455] hsr_slave_0: left promiscuous mode
[ 1895.092853][T19455] hsr_slave_1: left promiscuous mode
[ 1895.106678][T19455] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1895.114670][T19455] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1895.126812][T19455] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1895.134724][T19455] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1895.161220][T19455] bridge_slave_1: left allmulticast mode
[ 1895.167096][T19455] bridge_slave_1: left promiscuous mode
[ 1895.173910][T19455] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1895.204076][T19455] bridge_slave_0: left allmulticast mode
[ 1895.210344][T19455] bridge_slave_0: left promiscuous mode
[ 1895.216847][T19455] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1895.266290][T19455] veth1_macvtap: left promiscuous mode
[ 1895.272754][T19455] veth0_macvtap: left promiscuous mode
[ 1895.278620][T19455] veth1_vlan: left promiscuous mode
[ 1895.287823][T19455] veth0_vlan: left promiscuous mode
[ 1896.262179][T14000] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1896.271024][T14000] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1896.280603][T14000] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1896.301768][ T5012] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1896.317562][ T5012] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1896.327544][ T5012] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1896.392684][T19455] team0 (unregistering): Port device team_slave_1 removed
[ 1896.468970][T19455] team0 (unregistering): Port device team_slave_0 removed
[ 1896.498207][T19455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1896.538579][T19455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1896.728904][T19455] bond0 (unregistering): Released all slaves
[ 1897.663968][T21696] chnl_net:caif_netlink_parms(): no params data found
[ 1898.420833][T14000] Bluetooth: hci2: command 0x0409 tx timeout
[ 1898.607642][T21696] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1898.615649][T21696] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1898.623619][T21696] bridge_slave_0: entered allmulticast mode
[ 1898.632634][T21696] bridge_slave_0: entered promiscuous mode
[ 1898.667318][T21696] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1898.675245][T21696] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1898.683966][T21696] bridge_slave_1: entered allmulticast mode
[ 1898.693021][T21696] bridge_slave_1: entered promiscuous mode
[ 1898.807948][T21696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1898.832548][T21696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1898.961793][T21696] team0: Port device team_slave_0 added
[ 1899.001649][T21696] team0: Port device team_slave_1 added
[ 1899.130790][T21696] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1899.137947][T21696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1899.164400][T21696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1899.187935][T21696] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1899.195605][T21696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1899.222135][T21696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1899.347963][T21696] hsr_slave_0: entered promiscuous mode
[ 1899.381319][T21696] hsr_slave_1: entered promiscuous mode
[ 1899.390926][T21696] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1899.398666][T21696] Cannot create hsr debugfs directory
[ 1900.292751][T21696] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1900.316525][T21696] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1900.351822][T21696] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1900.389253][T21696] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1900.519506][ T4999] Bluetooth: hci2: command 0x041b tx timeout
[ 1900.925377][T21696] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1900.982181][T21696] 8021q: adding VLAN 0 to HW filter on device team0
[ 1901.030417][ T6536] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1901.038033][ T6536] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1901.087439][ T6536] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1901.095188][ T6536] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1901.411760][T21696] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1901.588421][T21696] veth0_vlan: entered promiscuous mode
[ 1901.656705][T21696] veth1_vlan: entered promiscuous mode
[ 1901.821915][T21696] veth0_macvtap: entered promiscuous mode
[ 1901.867815][T21696] veth1_macvtap: entered promiscuous mode
[ 1901.938919][T21696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1901.950954][T21696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1901.961575][T21696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1901.972262][T21696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1901.982376][T21696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1901.993143][T21696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1902.003237][T21696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1902.013987][T21696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1902.024196][T21696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1902.034946][T21696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1902.050901][T21696] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1902.121480][T21696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1902.133944][T21696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1902.144988][T21696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1902.155809][T21696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1902.165955][T21696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1902.176693][T21696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1902.186986][T21696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1902.197689][T21696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1902.207881][T21696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1902.218577][T21696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1902.233461][T21696] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1902.302057][T21696] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1902.313650][T21696] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1902.323334][T21696] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1902.332645][T21696] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1902.533810][ T6536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1902.542236][ T6536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1902.600170][ T4999] Bluetooth: hci2: command 0x040f tx timeout
[ 1902.643787][T31328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1902.653240][T31328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1902.936520][T21742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1903.015763][T21743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1903.103141][T21742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:35:23 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x4a}, 0x0)

17:35:23 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r2, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:35:23 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0xf00}, 0x0)

17:35:23 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r4, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:35:23 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x0, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

17:35:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r4, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r5, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 1903.709377][T21752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1903.765444][T21755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1903.828790][T21752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1903.858554][T21808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:35:24 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0xffa}, 0x0)

[ 1903.895701][T21803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:35:24 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x4c}, 0x0)

[ 1904.031219][T21853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1904.118592][T21854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1904.141399][T21833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:35:24 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(0x0, r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

17:35:24 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x1100}, 0x0)

17:35:24 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r4, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:35:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r4, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r5, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:35:24 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r1, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:35:24 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x60}, 0x0)

[ 1904.660221][T14000] Bluetooth: hci2: command 0x0419 tx timeout
17:35:25 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x1200}, 0x0)

17:35:25 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(0x0, r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

[ 1904.816466][T21875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1905.026373][T21878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1905.078715][T21885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1905.116879][T21887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1905.155535][T21881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:35:25 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x2500}, 0x0)

17:35:25 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x68}, 0x0)

[ 1905.206326][T21885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1905.228298][T21878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1905.532363][T21882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:35:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r4, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r5, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:35:26 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x4788}, 0x0)

[ 1905.748879][ T4111] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
17:35:26 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x6c}, 0x0)

17:35:26 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(0x0, r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

[ 1906.057035][ T4111] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1906.241244][T21994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1906.332370][ T4111] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1906.332805][T21996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1906.512340][ T4111] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1908.424827][ T4111] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING)
[ 1908.845254][ T4111] hsr_slave_0: left promiscuous mode
[ 1908.853805][ T4111] hsr_slave_1: left promiscuous mode
[ 1908.867850][ T4111] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1908.877093][ T4111] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1908.919410][ T4111] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1908.927341][ T4111] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1908.939127][ T4111] bridge_slave_1: left allmulticast mode
[ 1908.945154][ T4111] bridge_slave_1: left promiscuous mode
[ 1908.951897][ T4111] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1908.968089][ T4111] bridge_slave_0: left allmulticast mode
[ 1908.974167][ T4111] bridge_slave_0: left promiscuous mode
[ 1908.981129][ T4111] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1909.027867][ T4111] veth1_macvtap: left promiscuous mode
[ 1909.034208][ T4111] veth0_macvtap: left promiscuous mode
[ 1909.040314][ T4111] veth1_vlan: left promiscuous mode
[ 1909.045817][ T4111] veth0_vlan: left promiscuous mode
[ 1910.171120][T14000] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1910.191938][T14000] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1910.200737][T14000] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1910.405642][ T5012] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1910.416033][ T5012] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1910.429383][ T5012] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1910.541027][ T4111] team0 (unregistering): Port device team_slave_1 removed
[ 1910.668665][ T4111] team0 (unregistering): Port device team_slave_0 removed
[ 1910.755137][ T4111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1910.806621][ T4111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1910.901374][ T5012] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1910.927318][ T5012] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1910.937807][ T5012] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1910.960613][ T5012] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1910.972117][ T5012] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1910.981150][ T5012] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1911.170249][ T4111] bond0 (unregistering): Released all slaves
[ 1912.390460][T22120] chnl_net:caif_netlink_parms(): no params data found
[ 1912.414355][T22123] chnl_net:caif_netlink_parms(): no params data found
[ 1912.513699][ T5012] Bluetooth: hci2: command 0x0409 tx timeout
[ 1913.060044][ T5012] Bluetooth: hci4: command 0x0409 tx timeout
[ 1913.437717][T19455] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1913.602310][T19455] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1913.869091][T19455] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1913.910551][T22120] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1913.920844][T22120] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1913.928667][T22120] bridge_slave_0: entered allmulticast mode
[ 1913.937970][T22120] bridge_slave_0: entered promiscuous mode
[ 1914.061814][T19455] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1914.100546][T22123] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1914.108211][T22123] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1914.116784][T22123] bridge_slave_0: entered allmulticast mode
[ 1914.128491][T22123] bridge_slave_0: entered promiscuous mode
[ 1914.141223][T22120] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1914.148814][T22120] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1914.156818][T22120] bridge_slave_1: entered allmulticast mode
[ 1914.165877][T22120] bridge_slave_1: entered promiscuous mode
[ 1914.174775][T22123] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1914.184585][T22123] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1914.192557][T22123] bridge_slave_1: entered allmulticast mode
[ 1914.201518][T22123] bridge_slave_1: entered promiscuous mode
[ 1914.489085][T22120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1914.510984][T22123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1914.535873][T22123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1914.587923][ T5012] Bluetooth: hci2: command 0x041b tx timeout
[ 1914.663788][T22120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1914.679469][T22123] team0: Port device team_slave_0 added
[ 1914.745991][T22123] team0: Port device team_slave_1 added
[ 1915.066053][T22120] team0: Port device team_slave_0 added
[ 1915.138112][T22120] team0: Port device team_slave_1 added
[ 1915.139992][ T5012] Bluetooth: hci4: command 0x041b tx timeout
[ 1915.177997][T22123] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1915.185592][T22123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1915.212023][T22123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1915.236222][T22123] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1915.244668][T22123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1915.273464][T22123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1915.483661][T22120] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1915.491112][T22120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1915.517413][T22120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1915.606293][T22120] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1915.613590][T22120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1915.640080][T22120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1915.671579][T22123] hsr_slave_0: entered promiscuous mode
[ 1915.682984][T22123] hsr_slave_1: entered promiscuous mode
[ 1915.702653][T22123] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1915.710512][T22123] Cannot create hsr debugfs directory
[ 1915.918878][T22120] hsr_slave_0: entered promiscuous mode
[ 1915.939223][T22120] hsr_slave_1: entered promiscuous mode
[ 1915.947080][T22120] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1915.954994][T22120] Cannot create hsr debugfs directory
[ 1916.666168][ T5012] Bluetooth: hci2: command 0x040f tx timeout
[ 1916.829108][T19455] hsr_slave_0: left promiscuous mode
[ 1916.838985][T19455] hsr_slave_1: left promiscuous mode
[ 1916.857274][T19455] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1916.865164][T19455] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1916.884484][T19455] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1916.895509][T19455] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1916.916018][T19455] bridge_slave_1: left allmulticast mode
[ 1916.922139][T19455] bridge_slave_1: left promiscuous mode
[ 1916.928665][T19455] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1916.951643][T19455] bridge_slave_0: left allmulticast mode
[ 1916.957500][T19455] bridge_slave_0: left promiscuous mode
[ 1916.964219][T19455] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1917.006284][T19455] veth1_macvtap: left promiscuous mode
[ 1917.013600][T19455] veth0_macvtap: left promiscuous mode
[ 1917.019443][T19455] veth1_vlan: left promiscuous mode
[ 1917.025286][T19455] veth0_vlan: left promiscuous mode
[ 1917.231046][ T5012] Bluetooth: hci4: command 0x040f tx timeout
[ 1918.052340][T19455] team0 (unregistering): Port device team_slave_1 removed
[ 1918.081164][T19455] team0 (unregistering): Port device team_slave_0 removed
[ 1918.107932][T19455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1918.146296][T19455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1918.346061][T19455] bond0 (unregistering): Released all slaves
[ 1918.742364][ T5012] Bluetooth: hci2: command 0x0419 tx timeout
[ 1919.299910][ T5012] Bluetooth: hci4: command 0x0419 tx timeout
[ 1920.287925][T22123] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1920.308506][T22120] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1920.347928][T22120] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1920.374585][T22123] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1920.413548][T22120] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1920.436936][T22123] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1920.467158][T22123] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1920.498136][T22120] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1921.227398][T22123] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1921.378796][T22123] 8021q: adding VLAN 0 to HW filter on device team0
[ 1921.418940][T22120] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1921.485077][ T6536] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1921.492794][ T6536] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1921.526314][T22120] 8021q: adding VLAN 0 to HW filter on device team0
[ 1921.586407][ T6536] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1921.594124][ T6536] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1921.614807][ T6536] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1921.622483][ T6536] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1921.703174][ T6536] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1921.710966][ T6536] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1922.184498][T22123] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1922.266417][T22120] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1922.421300][T22123] veth0_vlan: entered promiscuous mode
[ 1922.467008][T22123] veth1_vlan: entered promiscuous mode
[ 1922.693300][T22123] veth0_macvtap: entered promiscuous mode
[ 1922.764635][T22123] veth1_macvtap: entered promiscuous mode
[ 1922.786484][T22120] veth0_vlan: entered promiscuous mode
[ 1922.864519][T22120] veth1_vlan: entered promiscuous mode
[ 1922.959970][T22123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1922.970750][T22123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1922.981272][T22123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1922.992026][T22123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1923.003192][T22123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1923.014172][T22123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1923.024362][T22123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1923.038300][T22123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1923.053713][T22123] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1923.113394][T22123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1923.125466][T22123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1923.138876][T22123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1923.149913][T22123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1923.160039][T22123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1923.170870][T22123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1923.181032][T22123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1923.191916][T22123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1923.207005][T22123] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1923.281260][T22123] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1923.290455][T22123] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1923.299472][T22123] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1923.311890][T22123] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1923.405314][T22120] veth0_macvtap: entered promiscuous mode
[ 1923.555548][T22120] veth1_macvtap: entered promiscuous mode
[ 1923.571656][T19946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1923.582093][T19946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1923.742081][ T5060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1923.751614][ T5060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1923.774849][T22120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1923.787192][T22120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1923.797935][T22120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1923.809515][T22120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1923.819736][T22120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1923.830463][T22120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1923.840597][T22120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1923.852853][T22120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1923.863147][T22120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1923.873931][T22120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1923.889049][T22120] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1924.003153][T22120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1924.015460][T22120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1924.025651][T22120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1924.036371][T22120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1924.046499][T22120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1924.058783][T22120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1924.069105][T22120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1924.079847][T22120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1924.089993][T22120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1924.101481][T22120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1924.116782][T22120] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1924.172129][T22120] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1924.181820][T22120] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1924.190979][T22120] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1924.200139][T22120] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1924.391553][ T6536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1924.399614][ T6536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1924.533497][T22183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1924.561242][ T6536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1924.571145][ T6536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1924.639154][T22183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1924.719296][T22184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1924.893162][T22187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1924.926807][T19946] wlan1: authenticate with 08:02:11:00:00:00
[ 1924.936727][T19946] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 1925.008566][T22188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1925.050164][T19946] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[ 1925.160326][T19946] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[ 1925.270431][T19946] wlan1: authentication with 08:02:11:00:00:00 timed out
17:35:45 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r4, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:35:45 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x74}, 0x0)

17:35:45 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x4888}, 0x0)

17:35:45 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r4, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r5, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:35:45 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

17:35:45 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r1, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 1925.651280][T22203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:35:46 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x5865}, 0x0)

[ 1925.771866][T22208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1925.842792][T22207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1925.855301][T22206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1925.884720][T22210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:35:46 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

[ 1925.969430][T22209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:35:46 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x7a}, 0x0)

17:35:46 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x6000}, 0x0)

17:35:46 executing program 4:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r1, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:35:46 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r4, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r5, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 1926.904414][T22282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1927.018428][T19455] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1927.189047][T22324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1927.294494][T22324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1927.325238][T19455] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1927.467498][T19455] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1927.711786][T19455] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1929.723568][T19455] hsr_slave_0: left promiscuous mode
[ 1929.737322][T19455] hsr_slave_1: left promiscuous mode
[ 1929.747303][T19455] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1929.755320][T19455] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1929.786902][T19455] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1929.796264][T19455] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1929.814751][T19455] bridge_slave_1: left allmulticast mode
[ 1929.820704][T19455] bridge_slave_1: left promiscuous mode
[ 1929.827235][T19455] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1929.844404][T19455] bridge_slave_0: left allmulticast mode
[ 1929.850381][T19455] bridge_slave_0: left promiscuous mode
[ 1929.856954][T19455] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1929.897423][T19455] veth1_macvtap: left promiscuous mode
[ 1929.903758][T19455] veth0_macvtap: left promiscuous mode
[ 1929.909607][T19455] veth1_vlan: left promiscuous mode
[ 1929.915444][T19455] veth0_vlan: left promiscuous mode
[ 1931.233446][ T4999] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1931.246359][ T4999] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1931.256351][ T4999] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1931.277255][ T4999] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1931.289359][ T4999] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1931.299232][ T4999] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1931.647972][ T5012] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1931.659017][ T5012] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1931.678889][ T5012] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1931.707784][T14000] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1931.723674][T14000] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1931.735229][T14000] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1931.798626][T19455] team0 (unregistering): Port device team_slave_1 removed
[ 1931.937613][T19455] team0 (unregistering): Port device team_slave_0 removed
[ 1931.993441][T19455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1932.026506][T19455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1932.223900][T19455] bond0 (unregistering): Released all slaves
[ 1933.381705][T14000] Bluetooth: hci2: command 0x0409 tx timeout
[ 1933.410216][T22352] chnl_net:caif_netlink_parms(): no params data found
[ 1933.730317][T22348] chnl_net:caif_netlink_parms(): no params data found
[ 1933.781034][ T4999] Bluetooth: hci4: command 0x0409 tx timeout
[ 1934.195555][ T1218] ieee802154 phy0 wpan0: encryption failed: -22
[ 1934.202405][ T1218] ieee802154 phy1 wpan1: encryption failed: -22
[ 1934.833875][T22352] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1934.841569][T22352] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1934.849442][T22352] bridge_slave_0: entered allmulticast mode
[ 1934.858590][T22352] bridge_slave_0: entered promiscuous mode
[ 1935.099184][T22352] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1935.106951][T22352] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1935.117832][T22352] bridge_slave_1: entered allmulticast mode
[ 1935.126914][T22352] bridge_slave_1: entered promiscuous mode
[ 1935.146156][T22348] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1935.153843][T22348] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1935.161907][T22348] bridge_slave_0: entered allmulticast mode
[ 1935.170981][T22348] bridge_slave_0: entered promiscuous mode
[ 1935.265903][T22348] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1935.273812][T22348] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1935.281820][T22348] bridge_slave_1: entered allmulticast mode
[ 1935.290815][T22348] bridge_slave_1: entered promiscuous mode
[ 1935.330960][T22352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1935.360039][T22352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1935.471112][ T4999] Bluetooth: hci2: command 0x041b tx timeout
[ 1935.614293][T22352] team0: Port device team_slave_0 added
[ 1935.638593][T22348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1935.653461][T22352] team0: Port device team_slave_1 added
[ 1935.701575][T22348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1935.860148][ T4999] Bluetooth: hci4: command 0x041b tx timeout
[ 1935.929832][T22348] team0: Port device team_slave_0 added
[ 1935.968120][T22352] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1935.975526][T22352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1936.002020][T22352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1936.050152][T22348] team0: Port device team_slave_1 added
[ 1936.087170][T19455] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1936.200652][T22352] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1936.207809][T22352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1936.234222][T22352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1936.312248][T19455] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1936.525370][T19455] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1936.572396][T22348] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1936.579556][T22348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1936.606161][T22348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1936.684887][T19455] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1936.796419][T22348] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1936.803738][T22348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1936.830879][T22348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1936.925372][T22352] hsr_slave_0: entered promiscuous mode
[ 1936.935888][T22352] hsr_slave_1: entered promiscuous mode
[ 1936.945880][T22352] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1936.953730][T22352] Cannot create hsr debugfs directory
[ 1937.426888][T22348] hsr_slave_0: entered promiscuous mode
[ 1937.438051][T22348] hsr_slave_1: entered promiscuous mode
[ 1937.446373][T22348] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1937.454539][T22348] Cannot create hsr debugfs directory
[ 1937.540009][ T4999] Bluetooth: hci2: command 0x040f tx timeout
[ 1937.959837][ T4999] Bluetooth: hci4: command 0x040f tx timeout
[ 1939.179803][T19455] hsr_slave_0: left promiscuous mode
[ 1939.209877][T19455] hsr_slave_1: left promiscuous mode
[ 1939.219475][T19455] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1939.227544][T19455] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1939.252994][T19455] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1939.260846][T19455] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1939.283012][T19455] bridge_slave_1: left allmulticast mode
[ 1939.288977][T19455] bridge_slave_1: left promiscuous mode
[ 1939.295634][T19455] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1939.354580][T19455] bridge_slave_0: left allmulticast mode
[ 1939.360645][T19455] bridge_slave_0: left promiscuous mode
[ 1939.367174][T19455] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1939.470717][T19455] veth1_macvtap: left promiscuous mode
[ 1939.476455][T19455] veth0_macvtap: left promiscuous mode
[ 1939.482644][T19455] veth1_vlan: left promiscuous mode
[ 1939.488180][T19455] veth0_vlan: left promiscuous mode
[ 1939.619924][ T4999] Bluetooth: hci2: command 0x0419 tx timeout
[ 1940.020211][ T4999] Bluetooth: hci4: command 0x0419 tx timeout
[ 1940.910379][T19455] team0 (unregistering): Port device team_slave_1 removed
[ 1940.960899][T19455] team0 (unregistering): Port device team_slave_0 removed
[ 1941.007683][T19455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1941.083152][T19455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1941.348521][T19455] bond0 (unregistering): Released all slaves
[ 1941.797587][T22352] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1941.818180][T22352] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1941.864018][T22352] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1941.922072][T22348] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1941.950231][T22352] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1941.993515][T22348] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1942.061521][T22348] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1942.125144][T22348] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1942.866887][T22352] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1942.964623][T22348] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1943.024946][T22352] 8021q: adding VLAN 0 to HW filter on device team0
[ 1943.082570][T22348] 8021q: adding VLAN 0 to HW filter on device team0
[ 1943.118543][ T2497] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1943.126263][ T2497] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1943.206885][ T2497] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1943.214630][ T2497] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1943.235489][ T2497] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1943.243183][ T2497] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1943.318637][ T2497] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1943.326401][ T2497] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1943.834301][T22352] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1943.939912][T22348] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1944.287838][T22352] veth0_vlan: entered promiscuous mode
[ 1944.376143][T22348] veth0_vlan: entered promiscuous mode
[ 1944.392630][T22352] veth1_vlan: entered promiscuous mode
[ 1944.454193][T22348] veth1_vlan: entered promiscuous mode
[ 1944.721593][T22352] veth0_macvtap: entered promiscuous mode
[ 1944.762178][T22348] veth0_macvtap: entered promiscuous mode
[ 1944.807618][T22352] veth1_macvtap: entered promiscuous mode
[ 1944.866303][T22348] veth1_macvtap: entered promiscuous mode
[ 1944.954788][T22352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1944.965654][T22352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1944.975848][T22352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1944.986656][T22352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1944.997214][T22352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1945.008040][T22352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1945.018201][T22352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1945.028944][T22352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1945.044029][T22352] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1945.068237][T22348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1945.079079][T22348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1945.089293][T22348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1945.100041][T22348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1945.111821][T22348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1945.122580][T22348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1945.133928][T22348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1945.146208][T22348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1945.160418][T22348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1945.171441][T22348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1945.186460][T22348] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1945.264130][T22352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1945.275019][T22352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1945.285127][T22352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1945.295969][T22352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1945.306109][T22352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1945.316843][T22352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1945.326960][T22352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1945.337690][T22352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1945.353580][T22352] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1945.378511][T22348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1945.389470][T22348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1945.401834][T22348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1945.413913][T22348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1945.424018][T22348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1945.434851][T22348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1945.445091][T22348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1945.459001][T22348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1945.469416][T22348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1945.480302][T22348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1945.495217][T22348] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1945.563233][T22348] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1945.572410][T22348] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1945.583941][T22348] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1945.594964][T22348] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1945.649390][T22352] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1945.659899][T22352] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1945.668898][T22352] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1945.679855][T22352] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1946.091983][ T6455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1946.100927][ T6455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1946.150054][T19946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1946.154954][ T5060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1946.158006][T19946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1946.175303][ T5060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1946.294894][T19946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1946.303108][T19946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1946.460294][T22426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1946.533487][T22429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1946.569211][T22428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1946.599100][ T5060] wlan1: authenticate with 08:02:11:00:00:00
[ 1946.609301][ T5060] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 1946.615947][T22429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1946.677286][T22428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1946.742197][ T5060] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[ 1946.860564][ T5060] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
17:36:07 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r4, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:36:07 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0xce}, 0x0)

17:36:07 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x60ff}, 0x0)

[ 1946.984047][ T5060] wlan1: authentication with 08:02:11:00:00:00 timed out
17:36:07 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

17:36:07 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r4, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r5, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:36:07 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = open(0x0, 0x141042, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r2, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 1947.294119][T22441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1947.346338][T22443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:36:07 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x6558}, 0x0)

17:36:07 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

[ 1947.412252][T22442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1947.446585][T22441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:36:07 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x13e}, 0x0)

[ 1947.463469][ T5060] wlan1: authenticate with 08:02:11:00:00:00
[ 1947.472866][ T5060] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 1947.484434][T22436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1947.526021][T22441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1947.547199][T22445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1947.666014][T22446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:36:08 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x148}, 0x0)

17:36:08 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x8100}, 0x0)

17:36:08 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r4, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r5, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:36:08 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r4, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:36:08 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = open(0x0, 0x141042, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r2, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:36:08 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

17:36:08 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x152}, 0x0)

17:36:08 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x8847}, 0x0)

[ 1948.454845][T22464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1948.487159][T22460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1948.495639][T22461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1948.546667][T22467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1948.565150][T31328] wlan1: authenticated
[ 1948.594374][T31328] mac80211_hwsim hwsim45 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
[ 1948.608310][  T508] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[ 1948.617392][  T508] wlan1: associated
[ 1948.662299][T22464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1948.670589][T22470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1948.678742][T22461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1948.797891][T22465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1948.816708][T22460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:36:09 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x19c}, 0x0)

17:36:09 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x8848}, 0x0)

17:36:09 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

17:36:09 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r4, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:36:09 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r4, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r5, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:36:09 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0xfa0f}, 0x0)

17:36:09 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = open(0x0, 0x141042, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r2, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:36:09 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x288}, 0x0)

[ 1949.677951][T22585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:36:10 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, 0x0, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r8, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r9 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r9, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

[ 1949.767631][T22583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1949.788209][T22585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:36:10 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x34000}, 0x0)

[ 1949.867242][T22591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1949.888214][T22590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1949.916607][T22579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1949.997699][T22591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:36:10 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x300}, 0x0)

17:36:10 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x400300}, 0x0)

17:36:10 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r2, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:36:10 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r4, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r5, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 1950.605610][T20536] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1950.831890][T22692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1950.903291][T20536] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
17:36:11 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x1000000}, 0x0)

[ 1950.982783][T22692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1951.055293][T22706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1951.084945][T22702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1951.130447][T22692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1951.239566][T20536] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1951.244344][T22702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1951.474382][T20536] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1953.037744][T20536] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING)
[ 1953.361624][T20536] hsr_slave_0: left promiscuous mode
[ 1953.377255][T20536] hsr_slave_1: left promiscuous mode
[ 1953.386144][T20536] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1953.394171][T20536] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1953.410584][T20536] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1953.418316][T20536] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1953.440618][T20536] bridge_slave_1: left allmulticast mode
[ 1953.449930][T20536] bridge_slave_1: left promiscuous mode
[ 1953.456557][T20536] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1953.475871][T20536] bridge_slave_0: left allmulticast mode
[ 1953.481926][T20536] bridge_slave_0: left promiscuous mode
[ 1953.488492][T20536] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1953.532683][T20536] veth1_macvtap: left promiscuous mode
[ 1953.538438][T20536] veth0_macvtap: left promiscuous mode
[ 1953.548077][T20536] veth1_vlan: left promiscuous mode
[ 1953.553766][T20536] veth0_vlan: left promiscuous mode
[ 1954.400991][T14000] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1954.409580][T14000] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1954.419812][T14000] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1954.433650][T14000] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1954.447832][T14000] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1954.456754][T14000] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1954.796471][T20536] team0 (unregistering): Port device team_slave_1 removed
[ 1954.832683][T20536] team0 (unregistering): Port device team_slave_0 removed
[ 1954.857937][T20536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1954.897385][T20536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1955.099143][T20536] bond0 (unregistering): Released all slaves
[ 1955.895752][T22726] chnl_net:caif_netlink_parms(): no params data found
[ 1956.501415][T14000] Bluetooth: hci2: command 0x0409 tx timeout
[ 1956.737987][T22726] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1956.745917][T22726] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1956.753815][T22726] bridge_slave_0: entered allmulticast mode
[ 1956.762756][T22726] bridge_slave_0: entered promiscuous mode
[ 1956.816428][T22726] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1956.828078][T22726] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1956.836014][T22726] bridge_slave_1: entered allmulticast mode
[ 1956.844990][T22726] bridge_slave_1: entered promiscuous mode
[ 1956.957327][T22726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1957.010461][T22726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1957.193239][T22726] team0: Port device team_slave_0 added
[ 1957.228520][T22726] team0: Port device team_slave_1 added
[ 1957.396249][T22726] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1957.403707][T22726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1957.430220][T22726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1957.462295][T22726] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1957.469443][T22726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1957.496069][T22726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1957.626450][T22726] hsr_slave_0: entered promiscuous mode
[ 1957.660943][T22726] hsr_slave_1: entered promiscuous mode
[ 1957.669851][T22726] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1957.677618][T22726] Cannot create hsr debugfs directory
[ 1958.582982][T14000] Bluetooth: hci2: command 0x041b tx timeout
[ 1958.922059][T22726] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1958.945184][T22726] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1958.967293][T22726] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1958.994798][T22726] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1959.528316][T22726] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1959.581982][T22726] 8021q: adding VLAN 0 to HW filter on device team0
[ 1959.626975][ T5060] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1959.634708][ T5060] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1959.686513][ T5060] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1959.694319][ T5060] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1960.014422][T22726] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1960.215467][T22726] veth0_vlan: entered promiscuous mode
[ 1960.302243][T22726] veth1_vlan: entered promiscuous mode
[ 1960.451422][T22726] veth0_macvtap: entered promiscuous mode
[ 1960.491647][T22726] veth1_macvtap: entered promiscuous mode
[ 1960.564992][T22726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1960.575928][T22726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1960.588991][T22726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1960.600970][T22726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1960.613501][T22726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1960.624548][T22726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1960.634665][T22726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1960.645431][T22726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1960.656842][T22726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1960.659914][T14000] Bluetooth: hci2: command 0x040f tx timeout
[ 1960.668157][T22726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1960.688728][T22726] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1960.763092][T22726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1960.774032][T22726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1960.786482][T22726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1960.798203][T22726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1960.808263][T22726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1960.820996][T22726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1960.831394][T22726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1960.842130][T22726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1960.852259][T22726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1960.862964][T22726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1960.876687][T22726] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1960.940059][T22726] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1960.949041][T22726] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1960.958647][T22726] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1960.967763][T22726] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1961.207384][T31328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1961.215680][T31328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1961.272411][ T5060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1961.282040][ T5060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1961.599047][T22765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1961.622733][T22765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:36:22 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r4, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:36:22 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x34a}, 0x0)

17:36:22 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, 0x0, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r8, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r9 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r9, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

17:36:22 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x2000000}, 0x0)

17:36:22 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r2, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:36:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r4, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r5, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 1962.246632][T22779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1962.256291][T22777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:36:22 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x3000000}, 0x0)

[ 1962.375916][T22777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:36:22 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, 0x0, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r8, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r9 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r9, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

[ 1962.467722][T22786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1962.508337][T22782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:36:22 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x3dc}, 0x0)

[ 1962.551311][T22787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1962.648301][T22785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1962.739951][T14000] Bluetooth: hci2: command 0x0419 tx timeout
17:36:23 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x4000000}, 0x0)

17:36:23 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x3e0}, 0x0)

17:36:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r4, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r5, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:36:23 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r4, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:36:23 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

17:36:23 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r2, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:36:23 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x5000000}, 0x0)

[ 1963.555569][T22802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1963.618470][T22811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1963.681145][T22810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:36:24 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x6000000}, 0x0)

[ 1963.725608][T22802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1963.746550][T22811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:36:24 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x500}, 0x0)

[ 1963.834628][T22802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1963.849790][T22816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:36:24 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

[ 1963.939116][T22817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:36:24 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x7000000}, 0x0)

17:36:24 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x59a}, 0x0)

17:36:24 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r4, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:36:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r4, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r5, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:36:24 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r2, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:36:24 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

17:36:24 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x8000000}, 0x0)

[ 1964.841405][T22833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1964.850521][T22830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1964.947514][T22837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1965.000397][T22833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1965.088671][T22837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1965.126184][T22844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:36:25 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x9000000}, 0x0)

[ 1965.145954][T22830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:36:25 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x600}, 0x0)

[ 1965.313754][T22865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:36:25 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0xa000000}, 0x0)

17:36:25 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r4, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:36:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r3, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:36:26 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

17:36:26 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r2, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:36:26 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x700}, 0x0)

[ 1966.105663][T22956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1966.132677][T22957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:36:26 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0xb000000}, 0x0)

[ 1966.254394][T22960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1966.256913][T22956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1966.392096][T22963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1966.418350][T22962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:36:26 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

[ 1966.510777][T22965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:36:26 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x900}, 0x0)

[ 1966.614718][T22971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:36:26 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0xc000000}, 0x0)

[ 1966.746763][T22971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:36:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r3, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:36:27 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r4, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:36:27 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0xd000000}, 0x0)

17:36:27 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r2, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:36:27 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0xa00}, 0x0)

[ 1967.425552][T23045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1967.486378][T23068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1967.512888][T23049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1967.546306][T23081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1967.592999][T23034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:36:27 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

[ 1967.639552][T23094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1967.664037][T23034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:36:28 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0xe000000}, 0x0)

[ 1967.688375][T23068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:36:28 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0xb00}, 0x0)

[ 1967.800825][T23094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:36:28 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r4, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:36:28 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r3, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:36:28 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0xf000000}, 0x0)

17:36:28 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r2, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:36:28 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r8, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r9 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r9, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

17:36:28 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0xc00}, 0x0)

17:36:28 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x10000000}, 0x0)

[ 1968.633429][T23110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1968.678252][T23105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1968.753420][T23104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1968.785934][T23110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1968.847012][T23118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1968.902462][T23105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1968.924661][T23110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:36:29 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r8, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r9 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r9, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

17:36:29 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x11000000}, 0x0)

17:36:29 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0xd00}, 0x0)

17:36:29 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r2, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 1969.407268][ T6495] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
17:36:29 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r4, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r5, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 1969.706459][ T6495] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1969.905114][T23148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1969.924724][ T6495] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1970.030219][T23199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1970.089325][T23211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1970.162461][ T6495] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1970.176775][T23148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1970.247919][T23240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1970.355361][T23187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1972.103750][T14000] Bluetooth: hci3: command 0x0406 tx timeout
[ 1972.161232][ T6495] hsr_slave_0: left promiscuous mode
[ 1972.169420][ T6495] hsr_slave_1: left promiscuous mode
[ 1972.197725][ T6495] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1972.205728][ T6495] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1972.223567][ T6495] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1972.231535][ T6495] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1972.249598][ T6495] bridge_slave_1: left allmulticast mode
[ 1972.255682][ T6495] bridge_slave_1: left promiscuous mode
[ 1972.264206][ T6495] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1972.287458][ T6495] bridge_slave_0: left allmulticast mode
[ 1972.293536][ T6495] bridge_slave_0: left promiscuous mode
[ 1972.300215][ T6495] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1972.333481][ T6495] veth1_macvtap: left promiscuous mode
[ 1972.339235][ T6495] veth0_macvtap: left promiscuous mode
[ 1972.345576][ T6495] veth1_vlan: left promiscuous mode
[ 1972.351784][ T6495] veth0_vlan: left promiscuous mode
[ 1973.551471][T14000] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1973.561662][T14000] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1973.573481][T14000] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1973.586940][ T6495] team0 (unregistering): Port device team_slave_1 removed
[ 1973.588698][T14000] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1973.607156][T14000] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1973.636485][T14000] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1973.638374][ T6495] team0 (unregistering): Port device team_slave_0 removed
[ 1973.697187][ T6495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1973.773558][ T6495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1973.966130][ T6495] bond0 (unregistering): Released all slaves
[ 1974.714769][T23261] chnl_net:caif_netlink_parms(): no params data found
[ 1975.606930][T23261] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1975.614775][T23261] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1975.622689][T23261] bridge_slave_0: entered allmulticast mode
[ 1975.631586][T23261] bridge_slave_0: entered promiscuous mode
[ 1975.674717][T23261] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1975.682581][T23261] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1975.690757][T23261] bridge_slave_1: entered allmulticast mode
[ 1975.699868][T23261] bridge_slave_1: entered promiscuous mode
[ 1975.710896][ T4999] Bluetooth: hci2: command 0x0409 tx timeout
[ 1975.851791][T23261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1975.911311][T23261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1976.006077][T23261] team0: Port device team_slave_0 added
[ 1976.021547][T23261] team0: Port device team_slave_1 added
[ 1976.138363][T23261] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1976.145759][T23261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1976.172138][T23261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1976.255666][T23261] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1976.263788][T23261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1976.294307][T23261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1976.470282][T23261] hsr_slave_0: entered promiscuous mode
[ 1976.494474][T23261] hsr_slave_1: entered promiscuous mode
[ 1976.508623][T23261] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1976.516617][T23261] Cannot create hsr debugfs directory
[ 1977.493638][T23261] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1977.522364][T23261] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1977.544456][T23261] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1977.568152][T23261] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1977.780161][ T5012] Bluetooth: hci2: command 0x041b tx timeout
[ 1978.010103][T23261] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1978.070077][T23261] 8021q: adding VLAN 0 to HW filter on device team0
[ 1978.119885][ T6455] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1978.127528][ T6455] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1978.189994][ T6455] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1978.197583][ T6455] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1978.483055][T23261] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1978.683807][T23261] veth0_vlan: entered promiscuous mode
[ 1978.716475][T23261] veth1_vlan: entered promiscuous mode
[ 1978.817385][T23261] veth0_macvtap: entered promiscuous mode
[ 1978.843386][T23261] veth1_macvtap: entered promiscuous mode
[ 1978.903308][T23261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1978.915722][T23261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1978.925982][T23261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1978.936667][T23261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1978.949336][T23261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1978.960275][T23261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1978.970483][T23261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1978.983934][T23261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1978.995941][T23261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1979.006677][T23261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1979.021023][T23261] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1979.067645][T23261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1979.078934][T23261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1979.089045][T23261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1979.099978][T23261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1979.110140][T23261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1979.120881][T23261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1979.131088][T23261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1979.141858][T23261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1979.155129][T23261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1979.166102][T23261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1979.180976][T23261] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1979.231202][T23261] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1979.240435][T23261] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1979.253135][T23261] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1979.262485][T23261] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1979.429570][T15094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1979.437829][T15094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1979.509386][ T5071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1979.517530][ T5071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1979.713591][T23299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1979.728243][T23299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1979.745702][T23299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1979.870321][ T4999] Bluetooth: hci2: command 0x040f tx timeout
17:36:40 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r4, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:36:40 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x12000000}, 0x0)

17:36:40 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0xe00}, 0x0)

17:36:40 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r8, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r9 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r9, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

17:36:40 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r2, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:36:40 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r4, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r5, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 1980.317424][T23308] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1980.358990][T23309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:36:40 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x25000000}, 0x0)

[ 1980.464906][T23308] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1980.479903][T23313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:36:40 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0xf00}, 0x0)

[ 1980.568804][T23312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1980.595860][T23309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:36:40 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r8, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r9 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r9, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

[ 1980.616128][T23308] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1980.658829][T23314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:36:41 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x60000000}, 0x0)

[ 1980.946401][T23314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:36:41 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r4, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r5, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:36:41 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x1100}, 0x0)

[ 1981.490430][T23390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1981.576743][T23428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1981.646831][T23428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1981.940026][ T5012] Bluetooth: hci2: command 0x0419 tx timeout
[ 1983.866946][ T6495] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1983.977011][ T6495] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1984.124857][ T6495] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1984.247145][ T6495] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1985.976409][ T6495] hsr_slave_0: left promiscuous mode
[ 1985.993131][ T6495] hsr_slave_1: left promiscuous mode
[ 1986.016236][ T6495] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1986.024177][ T6495] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1986.043938][ T6495] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1986.051895][ T6495] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1986.068824][ T6495] bridge_slave_1: left allmulticast mode
[ 1986.074801][ T6495] bridge_slave_1: left promiscuous mode
[ 1986.081562][ T6495] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1986.128146][ T6495] bridge_slave_0: left allmulticast mode
[ 1986.134359][ T6495] bridge_slave_0: left promiscuous mode
[ 1986.141032][ T6495] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1986.180041][ T6495] veth1_macvtap: left promiscuous mode
[ 1986.185795][ T6495] veth0_macvtap: left promiscuous mode
[ 1986.193047][ T6495] veth1_vlan: left promiscuous mode
[ 1986.198584][ T6495] veth0_vlan: left promiscuous mode
[ 1987.020192][ T5012] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1987.028896][ T5012] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1987.042216][ T5012] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1987.054458][ T5012] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1987.072370][ T5012] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1987.081969][ T5012] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1987.419837][ T6495] team0 (unregistering): Port device team_slave_1 removed
[ 1987.453240][ T6495] team0 (unregistering): Port device team_slave_0 removed
[ 1987.483468][ T6495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1987.523393][ T6495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1987.696896][ T6495] bond0 (unregistering): Released all slaves
[ 1988.636095][T23446] chnl_net:caif_netlink_parms(): no params data found
[ 1989.139868][ T4999] Bluetooth: hci2: command 0x0409 tx timeout
[ 1989.467852][T23446] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1989.475715][T23446] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1989.483766][T23446] bridge_slave_0: entered allmulticast mode
[ 1989.496311][T23446] bridge_slave_0: entered promiscuous mode
[ 1989.513371][T23446] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1989.521072][T23446] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1989.528861][T23446] bridge_slave_1: entered allmulticast mode
[ 1989.537936][T23446] bridge_slave_1: entered promiscuous mode
[ 1989.710161][T23446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1989.732686][T23446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1989.854083][T23446] team0: Port device team_slave_0 added
[ 1989.878433][T23446] team0: Port device team_slave_1 added
[ 1989.975940][T23446] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1989.983351][T23446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1990.020099][T23446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1990.047661][T23446] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1990.054969][T23446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1990.082405][T23446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1990.234476][T23446] hsr_slave_0: entered promiscuous mode
[ 1990.250898][T23446] hsr_slave_1: entered promiscuous mode
[ 1990.279077][T23446] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1990.287203][T23446] Cannot create hsr debugfs directory
[ 1991.230722][ T4999] Bluetooth: hci2: command 0x041b tx timeout
[ 1991.625014][T23446] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1991.651407][T23446] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1991.673238][T23446] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1991.694942][T23446] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1992.146533][T23446] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1992.206908][T23446] 8021q: adding VLAN 0 to HW filter on device team0
[ 1992.240513][ T6455] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1992.248167][ T6455] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1992.347133][ T6455] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1992.355018][ T6455] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1992.492929][T23446] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1992.641358][T23446] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1992.829934][T23446] veth0_vlan: entered promiscuous mode
[ 1992.880629][T23446] veth1_vlan: entered promiscuous mode
[ 1993.026690][T23446] veth0_macvtap: entered promiscuous mode
[ 1993.052660][T23446] veth1_macvtap: entered promiscuous mode
[ 1993.137275][T23446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1993.148123][T23446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1993.158439][T23446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1993.169832][T23446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1993.186694][T23446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1993.197822][T23446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1993.207987][T23446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1993.218700][T23446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1993.228921][T23446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1993.240088][T23446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1993.254820][T23446] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1993.300783][ T4999] Bluetooth: hci2: command 0x040f tx timeout
[ 1993.359622][T23446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1993.374175][T23446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1993.386652][T23446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1993.397615][T23446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1993.407635][T23446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1993.418365][T23446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1993.428438][T23446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1993.439125][T23446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1993.449188][T23446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1993.459908][T23446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1993.474680][T23446] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1993.534466][T23446] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1993.543605][T23446] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1993.554894][T23446] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1993.564112][T23446] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1993.777063][ T5060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1993.785337][ T5060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1993.911027][ T6455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1993.919076][ T6455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1994.165244][T23486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1994.193788][T23486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1994.252584][T23487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:36:54 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r4, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:36:54 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r2, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:36:54 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x65580000}, 0x0)

17:36:54 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r8, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r9 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r9, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

17:36:54 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x1148}, 0x0)

17:36:54 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r4, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 1994.834880][T23499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1994.905759][T23498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1995.029060][T23508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1995.034906][T23499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:36:55 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x1200}, 0x0)

17:36:55 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x81000000}, 0x0)

[ 1995.094881][T23507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1995.135707][T23510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:36:55 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r8, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r9 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r9, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

[ 1995.217094][T23512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1995.394242][ T4999] Bluetooth: hci2: command 0x0419 tx timeout
[ 1995.419127][T23498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:36:55 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x81ffffff}, 0x0)

[ 1995.637268][ T1218] ieee802154 phy0 wpan0: encryption failed: -22
[ 1995.644114][ T1218] ieee802154 phy1 wpan1: encryption failed: -22
17:36:56 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r2, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:36:56 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:36:56 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x121e}, 0x0)

17:36:56 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x88470000}, 0x0)

[ 1996.175146][ T6495] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
17:36:56 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

[ 1996.478612][T23628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1996.573720][ T6495] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1996.604178][T19946] wlan1: authenticate with 08:02:11:00:00:00
[ 1996.614026][T19946] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 1996.647467][T23631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1996.691413][T23632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:36:57 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x121f}, 0x0)

17:36:57 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x88480000}, 0x0)

[ 1996.846876][ T6495] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1997.092142][ T6495] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1997.940397][ T9153] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[ 1998.049919][ T9153] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[ 1998.166210][ T9153] wlan1: authentication with 08:02:11:00:00:00 timed out
[ 1999.585920][ T6495] hsr_slave_0: left promiscuous mode
[ 1999.607527][ T6495] hsr_slave_1: left promiscuous mode
[ 1999.638124][ T6495] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1999.646201][ T6495] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1999.689381][ T6495] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1999.697303][ T6495] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1999.732457][ T6495] bridge_slave_1: left allmulticast mode
[ 1999.738418][ T6495] bridge_slave_1: left promiscuous mode
[ 1999.745089][ T6495] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1999.799437][ T6495] bridge_slave_0: left allmulticast mode
[ 1999.805528][ T6495] bridge_slave_0: left promiscuous mode
[ 1999.812346][ T6495] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1999.864196][ T6495] veth1_macvtap: left promiscuous mode
[ 1999.870170][ T6495] veth0_macvtap: left promiscuous mode
[ 1999.876018][ T6495] veth1_vlan: left promiscuous mode
[ 1999.881757][ T6495] veth0_vlan: left promiscuous mode
[ 2001.374778][ T4999] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2001.410176][ T4999] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2001.425691][ T4999] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2001.445678][ T4999] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2001.480051][ T4999] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2001.491551][ T4999] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2001.606549][ T6495] team0 (unregistering): Port device team_slave_1 removed
[ 2001.687338][ T6495] team0 (unregistering): Port device team_slave_0 removed
[ 2001.771142][ T6495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2001.808745][ T4999] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2001.827402][ T4999] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2001.836517][ T6495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2001.847272][ T4999] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2001.871298][ T4999] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2001.890179][ T4999] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 2001.910187][ T4999] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2002.291158][ T6495] bond0 (unregistering): Released all slaves
[ 2003.360364][T23768] chnl_net:caif_netlink_parms(): no params data found
[ 2003.456104][T23773] chnl_net:caif_netlink_parms(): no params data found
[ 2003.539923][ T5012] Bluetooth: hci3: command 0x0409 tx timeout
[ 2003.941384][ T4999] Bluetooth: hci4: command 0x0409 tx timeout
[ 2004.842518][T23768] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2004.855929][T23768] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2004.863919][T23768] bridge_slave_0: entered allmulticast mode
[ 2004.873026][T23768] bridge_slave_0: entered promiscuous mode
[ 2004.926003][T23773] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2004.933739][T23773] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2004.941647][T23773] bridge_slave_0: entered allmulticast mode
[ 2004.954288][T23773] bridge_slave_0: entered promiscuous mode
[ 2004.978428][T23768] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2004.987662][T23768] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2004.995883][T23768] bridge_slave_1: entered allmulticast mode
[ 2005.004938][T23768] bridge_slave_1: entered promiscuous mode
[ 2005.022096][T23773] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2005.031295][T23773] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2005.039289][T23773] bridge_slave_1: entered allmulticast mode
[ 2005.048590][T23773] bridge_slave_1: entered promiscuous mode
[ 2005.313563][T23773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2005.416428][T23773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2005.435940][T23768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2005.520478][T23768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2005.582125][ T6495] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2005.619868][ T4999] Bluetooth: hci3: command 0x041b tx timeout
[ 2005.902893][ T6495] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2005.972674][T23773] team0: Port device team_slave_0 added
[ 2005.990109][T23768] team0: Port device team_slave_0 added
[ 2006.005627][T23768] team0: Port device team_slave_1 added
[ 2006.020275][ T4999] Bluetooth: hci4: command 0x041b tx timeout
[ 2006.084635][ T6495] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2006.142750][T23773] team0: Port device team_slave_1 added
[ 2006.342985][ T6495] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2006.517064][T23768] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2006.524646][T23768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2006.551028][T23768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2006.568604][T23773] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2006.575922][T23773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2006.607041][T23773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2006.762457][T23768] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2006.769605][T23768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2006.797760][T23768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2006.816371][T23773] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2006.824043][T23773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2006.850547][T23773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2007.292635][T23768] hsr_slave_0: entered promiscuous mode
[ 2007.317373][T23768] hsr_slave_1: entered promiscuous mode
[ 2007.341583][T23768] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2007.349364][T23768] Cannot create hsr debugfs directory
[ 2007.570103][T23773] hsr_slave_0: entered promiscuous mode
[ 2007.590556][T23773] hsr_slave_1: entered promiscuous mode
[ 2007.599113][T23773] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2007.607057][T23773] Cannot create hsr debugfs directory
[ 2007.700141][ T4999] Bluetooth: hci3: command 0x040f tx timeout
[ 2008.100067][ T4999] Bluetooth: hci4: command 0x040f tx timeout
[ 2008.719355][ T6495] hsr_slave_0: left promiscuous mode
[ 2008.747073][ T6495] hsr_slave_1: left promiscuous mode
[ 2008.755658][ T6495] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2008.763714][ T6495] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2008.778376][ T6495] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2008.786222][ T6495] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2008.802010][ T6495] bridge_slave_1: left allmulticast mode
[ 2008.807975][ T6495] bridge_slave_1: left promiscuous mode
[ 2008.814675][ T6495] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2008.831431][ T6495] bridge_slave_0: left allmulticast mode
[ 2008.837299][ T6495] bridge_slave_0: left promiscuous mode
[ 2008.845200][ T6495] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2008.895836][ T6495] veth1_macvtap: left promiscuous mode
[ 2008.902042][ T6495] veth0_macvtap: left promiscuous mode
[ 2008.907880][ T6495] veth1_vlan: left promiscuous mode
[ 2008.913957][ T6495] veth0_vlan: left promiscuous mode
[ 2009.781739][ T4999] Bluetooth: hci3: command 0x0419 tx timeout
[ 2010.033868][ T6495] team0 (unregistering): Port device team_slave_1 removed
[ 2010.078599][ T6495] team0 (unregistering): Port device team_slave_0 removed
[ 2010.111376][ T6495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2010.165883][ T6495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2010.180098][ T4999] Bluetooth: hci4: command 0x0419 tx timeout
[ 2010.464185][ T6495] bond0 (unregistering): Released all slaves
[ 2011.870376][T23773] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2011.902292][T23768] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 2011.948098][T23773] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2011.966367][T23768] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2012.001339][T23768] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2012.029771][T23773] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2012.063869][T23773] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2012.095015][T23768] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2012.889154][T23773] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2012.958896][T23768] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2013.011160][T23773] 8021q: adding VLAN 0 to HW filter on device team0
[ 2013.052473][T23768] 8021q: adding VLAN 0 to HW filter on device team0
[ 2013.091312][T31328] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2013.098902][T31328] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2013.113741][T31328] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2013.121395][T31328] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2013.166359][T31328] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2013.174019][T31328] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2013.210433][T31328] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2013.218005][T31328] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2013.419428][T23768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2013.644395][T23768] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2013.665145][T23773] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2013.920070][T23773] veth0_vlan: entered promiscuous mode
[ 2013.968675][T23768] veth0_vlan: entered promiscuous mode
[ 2014.002379][T23773] veth1_vlan: entered promiscuous mode
[ 2014.081929][T23768] veth1_vlan: entered promiscuous mode
[ 2014.198763][T23773] veth0_macvtap: entered promiscuous mode
[ 2014.224679][T23773] veth1_macvtap: entered promiscuous mode
[ 2014.281783][T23768] veth0_macvtap: entered promiscuous mode
[ 2014.334459][T23773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2014.346204][T23773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2014.356903][T23773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2014.367629][T23773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2014.379565][T23773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2014.390785][T23773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2014.401011][T23773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2014.411692][T23773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2014.426466][T23773] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2014.443831][T23768] veth1_macvtap: entered promiscuous mode
[ 2014.538159][T23773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2014.549071][T23773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2014.559212][T23773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2014.570026][T23773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2014.584881][T23773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2014.595913][T23773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2014.606090][T23773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2014.616947][T23773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2014.631611][T23773] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2014.696757][T23773] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2014.706029][T23773] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2014.717150][T23773] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2014.727345][T23773] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2014.751644][T23768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2014.763360][T23768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2014.773524][T23768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2014.786021][T23768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2014.796206][T23768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2014.807033][T23768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2014.817092][T23768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2014.827748][T23768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2014.837841][T23768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2014.848476][T23768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2014.863335][T23768] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2014.939309][T23768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2014.951018][T23768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2014.961134][T23768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2014.971811][T23768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2014.982040][T23768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2014.993978][T23768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2015.004208][T23768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2015.014920][T23768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2015.024991][T23768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2015.035659][T23768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2015.049482][T23768] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2015.122021][T23768] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2015.131261][T23768] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2015.140725][T23768] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2015.152538][T23768] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2015.329386][T15094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2015.337593][T15094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2015.488195][T15094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2015.498817][T15094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2015.531154][T19946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2015.539186][T19946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2015.662573][ T2497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2015.670764][ T2497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2015.841293][T23830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2015.919889][T23833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2015.950864][T23832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2015.986553][ T2497] wlan1: authenticate with 08:02:11:00:00:00
[ 2015.996072][ T2497] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2016.005481][T23833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2016.041088][ T2497] wlan1: authenticated
[ 2016.046056][ T2497] mac80211_hwsim hwsim55 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
[ 2016.050871][T23834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2016.060181][ T2497] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[ 2016.129496][T31328] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[ 2016.136762][T23832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2016.138492][T31328] wlan1: associated
17:37:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r4, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:37:16 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x1300}, 0x0)

17:37:16 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:37:16 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x88a8ffff}, 0x0)

17:37:16 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

17:37:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r2, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:37:17 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x9d113ce7}, 0x0)

[ 2016.762834][T23841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2016.797936][T23851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2016.837369][T23876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2016.847771][T23871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2016.906834][T23885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2016.945941][T23841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2017.023987][T23897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:37:17 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x1e12}, 0x0)

17:37:17 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0xe73c119d}, 0x0)

17:37:17 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

[ 2017.175372][T23911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:37:17 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r2, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:37:17 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0xf0ffffff}, 0x0)

[ 2017.874731][T24019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2017.993512][T24065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2018.074993][T24065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2018.657836][ T6495] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2018.842762][ T6495] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2018.973598][ T6495] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2019.117623][ T6495] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2020.763027][ T6495] hsr_slave_0: left promiscuous mode
[ 2020.771469][ T6495] hsr_slave_1: left promiscuous mode
[ 2020.781617][ T6495] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2020.789316][ T6495] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2020.801542][ T6495] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2020.809225][ T6495] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2020.828992][ T6495] bridge_slave_1: left allmulticast mode
[ 2020.835035][ T6495] bridge_slave_1: left promiscuous mode
[ 2020.841737][ T6495] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2020.866226][ T6495] bridge_slave_0: left allmulticast mode
[ 2020.872497][ T6495] bridge_slave_0: left promiscuous mode
[ 2020.879027][ T6495] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2020.984965][ T6495] veth1_macvtap: left promiscuous mode
[ 2020.991032][ T6495] veth0_macvtap: left promiscuous mode
[ 2020.996891][ T6495] veth1_vlan: left promiscuous mode
[ 2021.003561][ T6495] veth0_vlan: left promiscuous mode
[ 2021.752970][ T5012] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2021.763679][ T5012] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2021.774273][ T5012] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2021.789439][T14000] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2021.805882][T14000] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2021.815892][T14000] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2022.327026][ T6495] team0 (unregistering): Port device team_slave_1 removed
[ 2022.362071][ T6495] team0 (unregistering): Port device team_slave_0 removed
[ 2022.389287][ T6495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2022.421120][ T6495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2022.617465][ T6495] bond0 (unregistering): Released all slaves
[ 2023.434064][T24083] chnl_net:caif_netlink_parms(): no params data found
[ 2023.860199][T14000] Bluetooth: hci3: command 0x0409 tx timeout
[ 2024.639927][T24083] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2024.647553][T24083] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2024.655609][T24083] bridge_slave_0: entered allmulticast mode
[ 2024.664661][T24083] bridge_slave_0: entered promiscuous mode
[ 2024.688529][T24083] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2024.698689][T24083] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2024.706607][T24083] bridge_slave_1: entered allmulticast mode
[ 2024.718643][T24083] bridge_slave_1: entered promiscuous mode
[ 2024.821508][T24083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2024.842552][T24083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2024.935724][T24083] team0: Port device team_slave_0 added
[ 2024.950924][T24083] team0: Port device team_slave_1 added
[ 2025.039566][T24083] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2025.046832][T24083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2025.077589][T24083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2025.100116][T24083] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2025.107263][T24083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2025.136419][T24083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2025.277806][T24083] hsr_slave_0: entered promiscuous mode
[ 2025.287577][T24083] hsr_slave_1: entered promiscuous mode
[ 2025.303654][T24083] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2025.311619][T24083] Cannot create hsr debugfs directory
[ 2025.940181][T14000] Bluetooth: hci3: command 0x041b tx timeout
[ 2026.462125][T24083] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 2026.495294][T24083] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2026.527554][T24083] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2026.577487][T24083] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2027.035751][T24083] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2027.096101][T24083] 8021q: adding VLAN 0 to HW filter on device team0
[ 2027.142897][ T9153] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2027.150621][ T9153] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2027.227666][ T9153] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2027.235363][ T9153] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2027.520689][T24083] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2027.726858][T24083] veth0_vlan: entered promiscuous mode
[ 2027.806905][T24083] veth1_vlan: entered promiscuous mode
[ 2027.936762][T24083] veth0_macvtap: entered promiscuous mode
[ 2027.967302][T24083] veth1_macvtap: entered promiscuous mode
[ 2028.021897][T14000] Bluetooth: hci3: command 0x040f tx timeout
[ 2028.051921][T24083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2028.062805][T24083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2028.073108][T24083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2028.085427][T24083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2028.098305][T24083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2028.109485][T24083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2028.119692][T24083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2028.130532][T24083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2028.140654][T24083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2028.151567][T24083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2028.166456][T24083] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2028.236976][T24083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2028.247943][T24083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2028.258131][T24083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2028.269016][T24083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2028.279176][T24083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2028.290012][T24083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2028.302917][T24083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2028.313874][T24083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2028.323929][T24083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2028.334650][T24083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2028.348349][T24083] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2028.419028][T24083] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2028.432512][T24083] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2028.442528][T24083] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2028.452883][T24083] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2028.644173][T31328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2028.652419][T31328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2028.765156][ T6455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2028.773955][ T6455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2029.165534][ T6455] wlan1: authenticate with 08:02:11:00:00:00
[ 2029.174913][ T6455] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2029.209418][T24122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2030.020161][ T5459] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[ 2030.111302][T14000] Bluetooth: hci3: command 0x0419 tx timeout
[ 2030.150311][ T5459] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[ 2030.260290][ T5459] wlan1: authentication with 08:02:11:00:00:00 timed out
[ 2031.998370][ T6495] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2032.931214][ T6495] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2033.100287][ T6495] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2033.246081][ T6495] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2035.069069][ T6495] hsr_slave_0: left promiscuous mode
[ 2035.095286][ T6495] hsr_slave_1: left promiscuous mode
[ 2035.140923][ T6495] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2035.148721][ T6495] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2035.183331][ T6495] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2035.191285][ T6495] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2035.223867][ T6495] bridge_slave_1: left allmulticast mode
[ 2035.229952][ T6495] bridge_slave_1: left promiscuous mode
[ 2035.236692][ T6495] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2035.238383][ T4999] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2035.270480][ T5012] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2035.281291][ T5012] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2035.296694][ T5012] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2035.314199][ T5012] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2035.341950][ T5012] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2035.353378][ T6495] bridge_slave_0: left allmulticast mode
[ 2035.359251][ T6495] bridge_slave_0: left promiscuous mode
[ 2035.368722][ T6495] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2035.475754][ T6495] veth1_macvtap: left promiscuous mode
[ 2035.481680][ T6495] veth0_macvtap: left promiscuous mode
[ 2035.487543][ T6495] veth1_vlan: left promiscuous mode
[ 2035.493436][ T6495] veth0_vlan: left promiscuous mode
[ 2036.750938][ T6495] team0 (unregistering): Port device team_slave_1 removed
[ 2036.803207][ T6495] team0 (unregistering): Port device team_slave_0 removed
[ 2036.862052][ T6495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2036.892966][ T6495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2037.087279][ T6495] bond0 (unregistering): Released all slaves
[ 2037.460442][ T5012] Bluetooth: hci3: command 0x0409 tx timeout
[ 2037.738737][T24184] chnl_net:caif_netlink_parms(): no params data found
[ 2038.850936][T24184] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2038.858540][T24184] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2038.866565][T24184] bridge_slave_0: entered allmulticast mode
[ 2038.875646][T24184] bridge_slave_0: entered promiscuous mode
[ 2038.932024][T24184] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2038.940180][T24184] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2038.950996][T24184] bridge_slave_1: entered allmulticast mode
[ 2038.960172][T24184] bridge_slave_1: entered promiscuous mode
[ 2039.122658][T24184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2039.177794][T24184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2039.311149][T24184] team0: Port device team_slave_0 added
[ 2039.329371][T24184] team0: Port device team_slave_1 added
[ 2039.443950][T24184] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2039.451202][T24184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2039.480790][T24184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2039.500326][T24184] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2039.507483][T24184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2039.534386][T24184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2039.551479][T14000] Bluetooth: hci3: command 0x041b tx timeout
[ 2039.681064][T24184] hsr_slave_0: entered promiscuous mode
[ 2039.699355][T24184] hsr_slave_1: entered promiscuous mode
[ 2039.708117][T24184] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2039.716000][T24184] Cannot create hsr debugfs directory
[ 2040.711014][T24184] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 2040.732078][T24184] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2040.754284][T24184] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2040.773397][T24184] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2041.408745][T24184] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2041.484052][T24184] 8021q: adding VLAN 0 to HW filter on device team0
[ 2041.526291][T19946] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2041.534135][T19946] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2041.626105][T19946] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2041.630801][T14000] Bluetooth: hci3: command 0x040f tx timeout
[ 2041.633772][T19946] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2041.825198][T24184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2041.971148][T24184] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2042.160922][T24184] veth0_vlan: entered promiscuous mode
[ 2042.209769][T24184] veth1_vlan: entered promiscuous mode
[ 2042.361597][T24184] veth0_macvtap: entered promiscuous mode
[ 2042.389783][T24184] veth1_macvtap: entered promiscuous mode
[ 2042.465005][T24184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2042.476604][T24184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2042.486809][T24184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2042.497635][T24184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2042.507925][T24184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2042.520091][T24184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2042.533461][T24184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2042.544401][T24184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2042.554627][T24184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2042.565414][T24184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2042.580484][T24184] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2042.652943][T24184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2042.665826][T24184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2042.677558][T24184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2042.688247][T24184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2042.698278][T24184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2042.708991][T24184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2042.719050][T24184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2042.729831][T24184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2042.742815][T24184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2042.753716][T24184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2042.768359][T24184] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2042.795836][T24184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2042.805011][T24184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2042.814117][T24184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2042.824927][T24184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2042.977327][ T6455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2042.989382][ T6455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2043.092036][ T6455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2043.100311][ T6455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2043.280288][T24236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2043.316385][ T5071] wlan1: authenticate with 08:02:11:00:00:00
[ 2043.325115][ T5071] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2043.359410][ T6455] wlan1: authenticated
[ 2043.364194][ T6455] mac80211_hwsim hwsim59 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
[ 2043.371152][T24237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2043.390307][ T6455] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[ 2043.470612][T24236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2043.471091][ T6455] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[ 2043.489560][ T6455] wlan1: associated
[ 2043.709887][T14000] Bluetooth: hci3: command 0x0419 tx timeout
17:37:44 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x1f12}, 0x0)

17:37:44 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:37:44 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:37:44 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

17:37:44 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r2, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:37:44 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0xfa0f0000}, 0x0)

17:37:44 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0xff600000}, 0x0)

[ 2044.126340][T24248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2044.186827][T24240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:37:44 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

[ 2044.265132][T24250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2044.279277][T24252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2044.294844][T24248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:37:44 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x2000}, 0x0)

[ 2044.410954][T24252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2044.506379][T24252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:37:44 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0xffffa888}, 0x0)

17:37:45 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2044.961885][   T10] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
17:37:45 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r4, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:37:45 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x2400}, 0x0)

[ 2045.131827][   T10] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
17:37:45 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0xffffff7f}, 0x0)

[ 2045.356941][   T10] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
17:37:45 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

[ 2045.576544][T24374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2045.619546][T24375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2045.685672][   T10] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
17:37:46 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x2500}, 0x0)

[ 2045.770771][T24375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2045.970527][T24366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2045.988310][T24374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:37:46 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0xffffff81}, 0x0)

[ 2048.417888][   T10] hsr_slave_0: left promiscuous mode
[ 2048.454055][   T10] hsr_slave_1: left promiscuous mode
[ 2048.485515][   T10] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2048.493458][   T10] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2048.552669][   T10] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2048.560572][   T10] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2048.592580][   T10] bridge_slave_1: left allmulticast mode
[ 2048.598553][   T10] bridge_slave_1: left promiscuous mode
[ 2048.605293][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2048.626617][   T10] bridge_slave_0: left allmulticast mode
[ 2048.632732][   T10] bridge_slave_0: left promiscuous mode
[ 2048.639254][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2048.697499][   T10] veth1_macvtap: left promiscuous mode
[ 2048.703533][   T10] veth0_macvtap: left promiscuous mode
[ 2048.709401][   T10] veth1_vlan: left promiscuous mode
[ 2048.715210][   T10] veth0_vlan: left promiscuous mode
[ 2049.439012][ T5012] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2049.462953][ T5012] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2049.471824][ T5012] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2049.488708][ T5012] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2049.502530][ T5012] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 2049.512560][ T5012] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2050.264925][T14000] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2050.279029][T14000] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2050.289575][T14000] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2050.309344][T14000] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2050.337089][T14000] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 2050.346062][T14000] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2050.503503][   T10] team0 (unregistering): Port device team_slave_1 removed
[ 2050.537850][   T10] team0 (unregistering): Port device team_slave_0 removed
[ 2050.573892][   T10] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2050.611251][   T10] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2050.803616][   T10] bond0 (unregistering): Released all slaves
[ 2051.622117][ T5012] Bluetooth: hci2: command 0x0409 tx timeout
[ 2051.867834][T24502] chnl_net:caif_netlink_parms(): no params data found
[ 2052.098622][T24500] chnl_net:caif_netlink_parms(): no params data found
[ 2052.420008][ T5012] Bluetooth: hci4: command 0x0409 tx timeout
[ 2053.118177][T24502] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2053.126016][T24502] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2053.136426][T24502] bridge_slave_0: entered allmulticast mode
[ 2053.145649][T24502] bridge_slave_0: entered promiscuous mode
[ 2053.279562][T24502] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2053.290490][T24502] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2053.298212][T24502] bridge_slave_1: entered allmulticast mode
[ 2053.307434][T24502] bridge_slave_1: entered promiscuous mode
[ 2053.317991][T24500] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2053.325931][T24500] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2053.333770][T24500] bridge_slave_0: entered allmulticast mode
[ 2053.342802][T24500] bridge_slave_0: entered promiscuous mode
[ 2053.448812][T24500] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2053.456702][T24500] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2053.464690][T24500] bridge_slave_1: entered allmulticast mode
[ 2053.473754][T24500] bridge_slave_1: entered promiscuous mode
[ 2053.605744][T24502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2053.652929][T24500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2053.671459][T24502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2053.692406][T24500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2053.708521][ T5012] Bluetooth: hci2: command 0x041b tx timeout
[ 2053.837705][   T10] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2054.011508][   T10] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2054.048171][T24502] team0: Port device team_slave_0 added
[ 2054.066801][T24500] team0: Port device team_slave_0 added
[ 2054.120373][   T10] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2054.184196][T24502] team0: Port device team_slave_1 added
[ 2054.198578][T24500] team0: Port device team_slave_1 added
[ 2054.247630][   T10] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2054.523017][ T5012] Bluetooth: hci4: command 0x041b tx timeout
[ 2054.600190][T24500] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2054.607446][T24500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2054.635826][T24500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2054.697317][T24502] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2054.705383][T24502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2054.734368][T24502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2054.760374][T24502] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2054.767524][T24502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2054.793971][T24502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2054.807980][T24500] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2054.815484][T24500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2054.843865][T24500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2055.377115][T24500] hsr_slave_0: entered promiscuous mode
[ 2055.386721][T24500] hsr_slave_1: entered promiscuous mode
[ 2055.396804][T24500] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2055.404998][T24500] Cannot create hsr debugfs directory
[ 2055.467004][T24502] hsr_slave_0: entered promiscuous mode
[ 2055.475854][T24502] hsr_slave_1: entered promiscuous mode
[ 2055.488603][T24502] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2055.496754][T24502] Cannot create hsr debugfs directory
[ 2055.791105][ T5012] Bluetooth: hci2: command 0x040f tx timeout
[ 2056.580379][ T5012] Bluetooth: hci4: command 0x040f tx timeout
[ 2056.924359][   T10] hsr_slave_0: left promiscuous mode
[ 2056.936477][   T10] hsr_slave_1: left promiscuous mode
[ 2056.949033][   T10] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2056.957803][   T10] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2056.972773][   T10] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2056.980749][   T10] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2056.996325][   T10] bridge_slave_1: left allmulticast mode
[ 2057.002483][   T10] bridge_slave_1: left promiscuous mode
[ 2057.009006][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2057.025642][   T10] bridge_slave_0: left allmulticast mode
[ 2057.031637][   T10] bridge_slave_0: left promiscuous mode
[ 2057.038124][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2057.076357][ T1218] ieee802154 phy0 wpan0: encryption failed: -22
[ 2057.083171][ T1218] ieee802154 phy1 wpan1: encryption failed: -22
[ 2057.132210][   T10] veth1_macvtap: left promiscuous mode
[ 2057.137941][   T10] veth0_macvtap: left promiscuous mode
[ 2057.144055][   T10] veth1_vlan: left promiscuous mode
[ 2057.149543][   T10] veth0_vlan: left promiscuous mode
[ 2057.861877][ T5012] Bluetooth: hci2: command 0x0419 tx timeout
[ 2058.637931][   T10] team0 (unregistering): Port device team_slave_1 removed
[ 2058.659905][ T5012] Bluetooth: hci4: command 0x0419 tx timeout
[ 2058.687307][   T10] team0 (unregistering): Port device team_slave_0 removed
[ 2058.738371][   T10] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2058.801318][   T10] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2059.127887][   T10] bond0 (unregistering): Released all slaves
[ 2060.202275][T24502] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2060.334874][T24502] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2060.365087][T24500] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2060.410251][T24502] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2060.445095][T24500] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2060.469045][T24500] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2060.495735][T24502] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2060.551487][T24500] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2061.334090][T24502] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2061.447064][T24502] 8021q: adding VLAN 0 to HW filter on device team0
[ 2061.532863][  T508] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2061.540605][  T508] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2061.627874][  T508] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2061.635601][  T508] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2061.729427][T24500] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2061.956624][T24500] 8021q: adding VLAN 0 to HW filter on device team0
[ 2062.041478][  T508] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2062.049527][  T508] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2062.094039][T24502] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2062.148587][  T508] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2062.156363][  T508] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2062.510336][T24500] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2062.637767][T24502] veth0_vlan: entered promiscuous mode
[ 2062.745429][T24502] veth1_vlan: entered promiscuous mode
[ 2062.863946][T24500] veth0_vlan: entered promiscuous mode
[ 2062.940187][T24500] veth1_vlan: entered promiscuous mode
[ 2063.068403][T24502] veth0_macvtap: entered promiscuous mode
[ 2063.153539][T24502] veth1_macvtap: entered promiscuous mode
[ 2063.179019][T24500] veth0_macvtap: entered promiscuous mode
[ 2063.253703][T24500] veth1_macvtap: entered promiscuous mode
[ 2063.282645][T24502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2063.293522][T24502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2063.303685][T24502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2063.315300][T24502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2063.327380][T24502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2063.338271][T24502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2063.348402][T24502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2063.359189][T24502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2063.374341][T24502] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2063.446956][T24502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2063.457798][T24502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2063.468734][T24502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2063.479432][T24502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2063.489605][T24502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2063.500698][T24502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2063.510888][T24502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2063.521594][T24502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2063.538317][T24502] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2063.645518][T24500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2063.656322][T24500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2063.666470][T24500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2063.678919][T24500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2063.689174][T24500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2063.699967][T24500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2063.710151][T24500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2063.720888][T24500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2063.732510][T24500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2063.743561][T24500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2063.758591][T24500] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2063.815905][T24502] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2063.825630][T24502] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2063.836576][T24502] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2063.845829][T24502] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2063.957866][T24500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2063.968697][T24500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2063.978848][T24500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2063.989748][T24500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2063.999991][T24500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2064.010746][T24500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2064.021082][T24500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2064.031967][T24500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2064.045819][T24500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2064.056922][T24500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2064.071800][T24500] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2064.229273][T24500] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2064.238570][T24500] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2064.251990][T24500] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2064.261125][T24500] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2064.373192][ T5459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2064.381566][ T5459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2064.524332][  T508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2064.532575][  T508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2064.641287][ T5459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2064.651193][ T5459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2064.795535][ T6455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2064.804710][ T6455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2065.071214][T24566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2065.120583][T24565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2065.155281][T24565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2065.244326][T24567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2066.926327][T23634] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2067.187048][T23634] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2067.347951][T23634] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2067.507553][T23634] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2069.526225][T23634] hsr_slave_0: left promiscuous mode
[ 2069.549961][T23634] hsr_slave_1: left promiscuous mode
[ 2069.568244][T23634] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2069.576243][T23634] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2069.597844][T23634] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2069.605786][T23634] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2069.623262][T23634] bridge_slave_1: left allmulticast mode
[ 2069.629408][T23634] bridge_slave_1: left promiscuous mode
[ 2069.636180][T23634] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2069.659488][T23634] bridge_slave_0: left allmulticast mode
[ 2069.665774][T23634] bridge_slave_0: left promiscuous mode
[ 2069.675295][T23634] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2069.797607][T23634] veth1_macvtap: left promiscuous mode
[ 2069.803463][T23634] veth0_macvtap: left promiscuous mode
[ 2069.809297][T23634] veth1_vlan: left promiscuous mode
[ 2069.815313][T23634] veth0_vlan: left promiscuous mode
[ 2070.672643][ T5012] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2070.683025][ T5012] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2070.697436][ T5012] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2070.747339][ T5012] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2070.776145][ T5012] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 2070.789507][ T5012] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2071.528590][T23634] team0 (unregistering): Port device team_slave_1 removed
[ 2071.581264][T23634] team0 (unregistering): Port device team_slave_0 removed
[ 2071.629049][T23634] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2071.668921][T23634] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2071.961938][T23634] bond0 (unregistering): Released all slaves
[ 2072.843227][T24620] chnl_net:caif_netlink_parms(): no params data found
[ 2072.899821][ T5012] Bluetooth: hci2: command 0x0409 tx timeout
[ 2073.883281][T24620] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2073.891419][T24620] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2073.899139][T24620] bridge_slave_0: entered allmulticast mode
[ 2073.908139][T24620] bridge_slave_0: entered promiscuous mode
[ 2073.962680][T24620] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2073.975699][T24620] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2073.983639][T24620] bridge_slave_1: entered allmulticast mode
[ 2073.992638][T24620] bridge_slave_1: entered promiscuous mode
[ 2074.167922][T24620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2074.218143][T24620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2074.381699][T24620] team0: Port device team_slave_0 added
[ 2074.404806][T24620] team0: Port device team_slave_1 added
[ 2074.514363][T24620] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2074.521650][T24620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2074.547952][T24620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2074.580428][T24620] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2074.589523][T24620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2074.616637][T24620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2074.775873][T24620] hsr_slave_0: entered promiscuous mode
[ 2074.802646][T24620] hsr_slave_1: entered promiscuous mode
[ 2074.816447][T24620] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2074.824389][T24620] Cannot create hsr debugfs directory
[ 2074.984627][ T5012] Bluetooth: hci2: command 0x041b tx timeout
[ 2076.044002][T24620] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2076.084855][T24620] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2076.111961][T24620] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2076.158289][T24620] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2076.674216][T24620] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2076.736711][T24620] 8021q: adding VLAN 0 to HW filter on device team0
[ 2076.775792][ T2497] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2076.783570][ T2497] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2076.848357][ T2497] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2076.856127][ T2497] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2077.062018][ T5012] Bluetooth: hci2: command 0x040f tx timeout
[ 2077.175489][T24620] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2077.420484][T24620] veth0_vlan: entered promiscuous mode
[ 2077.479240][T24620] veth1_vlan: entered promiscuous mode
[ 2077.610982][T24620] veth0_macvtap: entered promiscuous mode
[ 2077.678075][T24620] veth1_macvtap: entered promiscuous mode
[ 2077.748773][T24620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2077.762250][T24620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2077.772642][T24620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2077.783367][T24620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2077.793480][T24620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2077.804248][T24620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2077.814452][T24620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2077.825914][T24620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2077.836158][T24620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2077.846935][T24620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2077.864091][T24620] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2077.913031][T24620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2077.923944][T24620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2077.934593][T24620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2077.945426][T24620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2077.955664][T24620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2077.968380][T24620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2077.978661][T24620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2077.989438][T24620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2077.999694][T24620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2078.010411][T24620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2078.025223][T24620] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2078.080827][T24620] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2078.089937][T24620] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2078.098927][T24620] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2078.109492][T24620] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2078.314294][T15094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2078.323504][T15094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2078.423626][ T5459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2078.431942][ T5459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2078.695346][T24674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2078.773697][T24674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2078.849607][T24677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2079.141538][ T5012] Bluetooth: hci2: command 0x0419 tx timeout
17:38:19 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r1, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:38:19 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

17:38:19 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:38:19 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0xfffffff0}, 0x0)

17:38:19 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x2f00}, 0x0)

17:38:19 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r4, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:38:19 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x60ffffffffff}, 0x0)

[ 2079.531064][T24688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2079.569797][T24691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2079.654208][T24694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2079.734167][T24688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2079.748365][T24697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:38:20 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x3a00}, 0x0)

17:38:20 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

[ 2079.847545][T24696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2079.885342][T24691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:38:20 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x40030000000000}, 0x0)

17:38:20 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, r4, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:38:20 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x3e01}, 0x0)

[ 2080.753014][T24711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2080.809200][T24711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2080.857918][T24711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2082.691974][ T4111] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2082.815640][ T4111] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2082.943838][ T4111] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2083.057246][ T4111] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2084.755125][ T4111] hsr_slave_0: left promiscuous mode
[ 2084.771195][ T4111] hsr_slave_1: left promiscuous mode
[ 2084.780215][ T4111] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2084.787916][ T4111] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2084.809253][ T4111] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2084.817489][ T4111] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2084.839402][ T4111] bridge_slave_1: left allmulticast mode
[ 2084.845488][ T4111] bridge_slave_1: left promiscuous mode
[ 2084.852280][ T4111] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2084.882810][ T4111] bridge_slave_0: left allmulticast mode
[ 2084.888690][ T4111] bridge_slave_0: left promiscuous mode
[ 2084.895508][ T4111] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2084.943013][ T4111] veth1_macvtap: left promiscuous mode
[ 2084.948766][ T4111] veth0_macvtap: left promiscuous mode
[ 2084.955005][ T4111] veth1_vlan: left promiscuous mode
[ 2084.960691][ T4111] veth0_vlan: left promiscuous mode
[ 2085.801013][T14000] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2085.813133][T14000] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2085.824317][T14000] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2085.839144][ T4999] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2085.860872][ T4999] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 2085.869616][ T4999] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2086.221719][ T4111] team0 (unregistering): Port device team_slave_1 removed
[ 2086.258402][ T4111] team0 (unregistering): Port device team_slave_0 removed
[ 2086.288192][ T4111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2086.323967][ T4111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2086.508304][ T4111] bond0 (unregistering): Released all slaves
[ 2087.242823][T24741] chnl_net:caif_netlink_parms(): no params data found
[ 2087.948091][ T4999] Bluetooth: hci2: command 0x0409 tx timeout
[ 2088.189522][T24741] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2088.197351][T24741] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2088.207444][T24741] bridge_slave_0: entered allmulticast mode
[ 2088.216202][T24741] bridge_slave_0: entered promiscuous mode
[ 2088.248342][T24741] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2088.256107][T24741] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2088.264050][T24741] bridge_slave_1: entered allmulticast mode
[ 2088.272958][T24741] bridge_slave_1: entered promiscuous mode
[ 2088.393927][T24741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2088.416550][T24741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2088.565952][T24741] team0: Port device team_slave_0 added
[ 2088.589100][T24741] team0: Port device team_slave_1 added
[ 2088.687738][T24741] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2088.695039][T24741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2088.724151][T24741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2088.750284][T24741] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2088.757449][T24741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2088.783942][T24741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2088.942072][T24741] hsr_slave_0: entered promiscuous mode
[ 2088.958125][T24741] hsr_slave_1: entered promiscuous mode
[ 2088.967077][T24741] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2088.975167][T24741] Cannot create hsr debugfs directory
[ 2090.020900][ T4999] Bluetooth: hci2: command 0x041b tx timeout
[ 2090.210572][T24741] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2090.229538][T24741] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2090.254678][T24741] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2090.275770][T24741] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2090.748327][T24741] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2090.827938][T24741] 8021q: adding VLAN 0 to HW filter on device team0
[ 2090.856098][ T6455] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2090.863853][ T6455] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2090.915187][ T6455] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2090.923077][ T6455] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2091.293995][T24741] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2091.537088][T24741] veth0_vlan: entered promiscuous mode
[ 2091.618052][T24741] veth1_vlan: entered promiscuous mode
[ 2091.749475][T24741] veth0_macvtap: entered promiscuous mode
[ 2091.801237][T24741] veth1_macvtap: entered promiscuous mode
[ 2091.915608][T24741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2091.927705][T24741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2091.938453][T24741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2091.949404][T24741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2091.959502][T24741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2091.970323][T24741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2091.980515][T24741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2091.994116][T24741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2092.004561][T24741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2092.015334][T24741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2092.030512][T24741] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2092.082169][T24741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2092.095947][T24741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2092.106656][T24741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2092.117526][T24741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2092.127651][T24741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2092.130130][ T4999] Bluetooth: hci2: command 0x040f tx timeout
[ 2092.138302][T24741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2092.154761][T24741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2092.165606][T24741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2092.175809][T24741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2092.188186][T24741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2092.206398][T24741] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2092.253031][T24741] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2092.263431][T24741] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2092.273744][T24741] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2092.283778][T24741] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2092.536648][ T2497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2092.545633][ T2497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2092.670940][ T2497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2092.678986][ T2497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2092.935169][T24782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2093.008915][T24785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2093.098187][T24785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:38:33 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:38:33 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:38:33 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

17:38:33 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x100000000000000}, 0x0)

17:38:33 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x3f00}, 0x0)

17:38:33 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2093.714200][T24797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:38:34 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x200000000000000}, 0x0)

[ 2093.788692][T24794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2093.865615][T24797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2093.926375][T24802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:38:34 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x4000}, 0x0)

[ 2093.975963][T24804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2094.073028][T24806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:38:34 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf2501000000050037000000000006"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

[ 2094.122131][T24809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2094.181839][ T5012] Bluetooth: hci2: command 0x0419 tx timeout
17:38:34 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x300000000000000}, 0x0)

17:38:34 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2094.535766][T24810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:38:34 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x400000000000000}, 0x0)

[ 2095.029170][T24820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2095.137737][T24823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2095.244679][T24823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2096.467897][ T6495] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2096.585545][ T6495] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2096.738769][ T6495] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2096.839139][ T6495] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2098.433357][ T6495] hsr_slave_0: left promiscuous mode
[ 2098.454452][ T6495] hsr_slave_1: left promiscuous mode
[ 2098.463935][ T6495] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2098.471925][ T6495] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2098.487151][ T6495] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2098.495143][ T6495] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2098.514130][ T6495] bridge_slave_1: left allmulticast mode
[ 2098.520383][ T6495] bridge_slave_1: left promiscuous mode
[ 2098.526861][ T6495] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2098.550652][ T6495] bridge_slave_0: left allmulticast mode
[ 2098.556533][ T6495] bridge_slave_0: left promiscuous mode
[ 2098.563238][ T6495] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2098.613074][ T6495] veth1_macvtap: left promiscuous mode
[ 2098.618829][ T6495] veth0_macvtap: left promiscuous mode
[ 2098.624887][ T6495] veth1_vlan: left promiscuous mode
[ 2098.630725][ T6495] veth0_vlan: left promiscuous mode
[ 2099.611026][ T4999] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2099.620618][ T4999] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2099.636833][ T4999] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2099.657283][T14000] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2099.680340][T14000] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 2099.688980][T14000] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2100.014351][ T6495] team0 (unregistering): Port device team_slave_1 removed
[ 2100.046884][ T6495] team0 (unregistering): Port device team_slave_0 removed
[ 2100.078641][ T6495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2100.116579][ T6495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2100.301038][ T6495] bond0 (unregistering): Released all slaves
[ 2101.152761][T24859] chnl_net:caif_netlink_parms(): no params data found
[ 2101.780946][ T5012] Bluetooth: hci2: command 0x0409 tx timeout
[ 2102.067654][T24859] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2102.075517][T24859] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2102.085258][T24859] bridge_slave_0: entered allmulticast mode
[ 2102.094130][T24859] bridge_slave_0: entered promiscuous mode
[ 2102.157070][T24859] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2102.166027][T24859] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2102.173930][T24859] bridge_slave_1: entered allmulticast mode
[ 2102.182814][T24859] bridge_slave_1: entered promiscuous mode
[ 2102.296136][T24859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2102.316945][T24859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2102.447900][T24859] team0: Port device team_slave_0 added
[ 2102.472704][T24859] team0: Port device team_slave_1 added
[ 2102.588445][T24859] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2102.595856][T24859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2102.622245][T24859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2102.647375][T24859] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2102.655708][T24859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2102.682688][T24859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2102.806855][T24859] hsr_slave_0: entered promiscuous mode
[ 2102.837323][T24859] hsr_slave_1: entered promiscuous mode
[ 2102.859226][T24859] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2102.867195][T24859] Cannot create hsr debugfs directory
[ 2103.866871][T14000] Bluetooth: hci2: command 0x041b tx timeout
[ 2103.994621][T24859] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2104.018528][T24859] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2104.038420][T24859] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2104.057686][T24859] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2104.504086][T24859] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2104.564120][T24859] 8021q: adding VLAN 0 to HW filter on device team0
[ 2104.607474][ T5459] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2104.615260][ T5459] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2104.653920][ T5459] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2104.661659][ T5459] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2104.986262][T24859] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2105.155554][T24859] veth0_vlan: entered promiscuous mode
[ 2105.211850][T24859] veth1_vlan: entered promiscuous mode
[ 2105.382494][T24859] veth0_macvtap: entered promiscuous mode
[ 2105.427276][T24859] veth1_macvtap: entered promiscuous mode
[ 2105.529111][T24859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2105.540764][T24859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2105.550960][T24859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2105.561743][T24859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2105.571921][T24859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2105.582698][T24859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2105.592933][T24859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2105.603831][T24859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2105.616865][T24859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2105.627978][T24859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2105.643177][T24859] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2105.729525][T24859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2105.741150][T24859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2105.751335][T24859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2105.762118][T24859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2105.772351][T24859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2105.783240][T24859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2105.793462][T24859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2105.804548][T24859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2105.817506][T24859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2105.828500][T24859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2105.843595][T24859] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2105.893633][T24859] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2105.903156][T24859] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2105.912326][T24859] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2105.924644][T24859] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2105.947281][ T5012] Bluetooth: hci2: command 0x040f tx timeout
[ 2106.116761][T19633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2106.126660][T19633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2106.210764][T19633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2106.218891][T19633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2106.439246][T24898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2106.527628][T24900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2106.611560][T24898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:38:47 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:38:47 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:38:47 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf2501000000050037000000000006"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

17:38:47 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x4788}, 0x0)

17:38:47 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x500000000000000}, 0x0)

17:38:47 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2107.312626][T24912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2107.368239][T24917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2107.413302][T24924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:38:47 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x600000000000000}, 0x0)

[ 2107.513475][T24958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:38:47 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x4800}, 0x0)

[ 2107.627192][T24924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2107.655196][T24912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2107.754623][T24924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:38:48 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf2501000000050037000000000006"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

[ 2108.018684][T23634] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2108.029551][T14000] Bluetooth: hci2: command 0x0419 tx timeout
17:38:48 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:38:48 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x700000000000000}, 0x0)

[ 2108.254222][T23634] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
17:38:48 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2108.495951][T23634] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
17:38:48 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x800000000000000}, 0x0)

[ 2108.654465][T25036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2108.731515][T23634] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2108.830443][T25036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2108.968860][T25036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2109.011110][T25038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2111.090436][T23634] hsr_slave_0: left promiscuous mode
[ 2111.114050][T23634] hsr_slave_1: left promiscuous mode
[ 2111.130129][T23634] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2111.137847][T23634] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2111.156468][T23634] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2111.164481][T23634] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2111.186863][T23634] bridge_slave_1: left allmulticast mode
[ 2111.193026][T23634] bridge_slave_1: left promiscuous mode
[ 2111.199546][T23634] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2111.284614][T23634] bridge_slave_0: left allmulticast mode
[ 2111.290740][T23634] bridge_slave_0: left promiscuous mode
[ 2111.297231][T23634] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2111.421712][T23634] veth1_macvtap: left promiscuous mode
[ 2111.427465][T23634] veth0_macvtap: left promiscuous mode
[ 2111.433710][T23634] veth1_vlan: left promiscuous mode
[ 2111.439266][T23634] veth0_vlan: left promiscuous mode
[ 2112.461325][T14000] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2112.476120][T14000] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2112.485855][T14000] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2112.515818][T14000] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2112.527767][T14000] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 2112.549592][T14000] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2113.306391][T23634] team0 (unregistering): Port device team_slave_1 removed
[ 2113.381735][T23634] team0 (unregistering): Port device team_slave_0 removed
[ 2113.440304][T23634] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2113.508334][T23634] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2113.851080][T23634] bond0 (unregistering): Released all slaves
[ 2113.935500][T14000] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2113.948206][T14000] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2113.971467][T14000] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2113.984458][T14000] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2113.994837][T14000] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 2114.010166][T14000] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2114.660559][ T5012] Bluetooth: hci2: command 0x0409 tx timeout
[ 2114.756170][T25061] chnl_net:caif_netlink_parms(): no params data found
[ 2115.481431][T25072] chnl_net:caif_netlink_parms(): no params data found
[ 2116.180072][ T5012] Bluetooth: hci4: command 0x0409 tx timeout
[ 2116.244346][T25061] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2116.252543][T25061] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2116.263624][T25061] bridge_slave_0: entered allmulticast mode
[ 2116.272624][T25061] bridge_slave_0: entered promiscuous mode
[ 2116.332286][T25061] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2116.340140][T25061] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2116.347887][T25061] bridge_slave_1: entered allmulticast mode
[ 2116.356904][T25061] bridge_slave_1: entered promiscuous mode
[ 2116.547560][T25061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2116.583855][T25061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2116.721220][T23634] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2116.750269][ T5012] Bluetooth: hci2: command 0x041b tx timeout
[ 2117.002150][T23634] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2117.036161][T25061] team0: Port device team_slave_0 added
[ 2117.120727][T25061] team0: Port device team_slave_1 added
[ 2117.161762][T23634] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2117.212574][T25072] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2117.221763][T25072] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2117.229486][T25072] bridge_slave_0: entered allmulticast mode
[ 2117.238544][T25072] bridge_slave_0: entered promiscuous mode
[ 2117.399600][T23634] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2117.434141][T25072] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2117.442664][T25072] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2117.450622][T25072] bridge_slave_1: entered allmulticast mode
[ 2117.459617][T25072] bridge_slave_1: entered promiscuous mode
[ 2117.636373][T25061] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2117.643675][T25061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2117.669977][T25061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2117.753715][T25061] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2117.761021][T25061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2117.787466][T25061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2117.826936][T25072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2117.966495][T25072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2118.167610][T25061] hsr_slave_0: entered promiscuous mode
[ 2118.210164][T25061] hsr_slave_1: entered promiscuous mode
[ 2118.220758][T25061] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2118.228506][T25061] Cannot create hsr debugfs directory
[ 2118.243429][T25072] team0: Port device team_slave_0 added
[ 2118.314109][ T5012] Bluetooth: hci4: command 0x041b tx timeout
[ 2118.385356][T25072] team0: Port device team_slave_1 added
[ 2118.515805][ T1218] ieee802154 phy0 wpan0: encryption failed: -22
[ 2118.522678][ T1218] ieee802154 phy1 wpan1: encryption failed: -22
[ 2118.623455][T25072] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2118.630788][T25072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2118.657104][T25072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2118.762671][T25072] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2118.770455][T25072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2118.796796][T25072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2118.829794][ T5012] Bluetooth: hci2: command 0x040f tx timeout
[ 2119.028643][T25072] hsr_slave_0: entered promiscuous mode
[ 2119.045756][T25072] hsr_slave_1: entered promiscuous mode
[ 2119.060743][T25072] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2119.068516][T25072] Cannot create hsr debugfs directory
[ 2120.340607][ T5012] Bluetooth: hci4: command 0x040f tx timeout
[ 2120.500547][T23634] hsr_slave_0: left promiscuous mode
[ 2120.508789][T23634] hsr_slave_1: left promiscuous mode
[ 2120.525569][T23634] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2120.533653][T23634] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2120.570484][T23634] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2120.578178][T23634] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2120.596616][T23634] bridge_slave_1: left allmulticast mode
[ 2120.602589][T23634] bridge_slave_1: left promiscuous mode
[ 2120.609089][T23634] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2120.624101][T23634] bridge_slave_0: left allmulticast mode
[ 2120.630046][T23634] bridge_slave_0: left promiscuous mode
[ 2120.636592][T23634] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2120.679046][T23634] veth1_macvtap: left promiscuous mode
[ 2120.685023][T23634] veth0_macvtap: left promiscuous mode
[ 2120.691595][T23634] veth1_vlan: left promiscuous mode
[ 2120.697128][T23634] veth0_vlan: left promiscuous mode
[ 2120.900159][T25070] Bluetooth: hci2: command 0x0419 tx timeout
[ 2121.699079][T23634] team0 (unregistering): Port device team_slave_1 removed
[ 2121.768860][T23634] team0 (unregistering): Port device team_slave_0 removed
[ 2121.814352][T23634] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2121.861027][T23634] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2122.124811][T23634] bond0 (unregistering): Released all slaves
[ 2122.427017][ T5012] Bluetooth: hci4: command 0x0419 tx timeout
[ 2123.038739][T25061] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2123.093655][T25061] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2123.194009][T25061] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2123.237501][T25072] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2123.268989][T25061] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2123.314963][T25072] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2123.391766][T25072] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2123.457103][T25072] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2124.035184][T25061] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2124.223809][T25061] 8021q: adding VLAN 0 to HW filter on device team0
[ 2124.288759][ T2497] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2124.296510][ T2497] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2124.384378][ T2497] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2124.392139][ T2497] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2124.619348][T25072] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2124.794432][T25072] 8021q: adding VLAN 0 to HW filter on device team0
[ 2124.891737][T31328] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2124.899414][T31328] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2124.943185][T25061] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2125.000193][T31328] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2125.007770][T31328] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2125.449382][T25061] veth0_vlan: entered promiscuous mode
[ 2125.598134][T25072] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2125.613303][T25061] veth1_vlan: entered promiscuous mode
[ 2125.849251][T25061] veth0_macvtap: entered promiscuous mode
[ 2125.967010][T25061] veth1_macvtap: entered promiscuous mode
[ 2126.023624][T25072] veth0_vlan: entered promiscuous mode
[ 2126.075665][T25061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2126.087607][T25061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2126.099381][T25061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2126.111480][T25061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2126.122289][T25061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2126.133093][T25061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2126.143279][T25061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2126.154183][T25061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2126.170567][T25061] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2126.228525][T25061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2126.239602][T25061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2126.249906][T25061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2126.260917][T25061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2126.271070][T25061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2126.281828][T25061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2126.292044][T25061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2126.304478][T25061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2126.319467][T25061] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2126.394650][T25061] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2126.405557][T25061] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2126.416944][T25061] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2126.426114][T25061] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2126.444736][T25072] veth1_vlan: entered promiscuous mode
[ 2126.647748][T31328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2126.656740][T31328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2126.829112][T25072] veth0_macvtap: entered promiscuous mode
[ 2126.858542][T25072] veth1_macvtap: entered promiscuous mode
[ 2126.881689][ T6536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2126.890044][ T6536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2126.984128][T25072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2126.996731][T25072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2127.008002][T25072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2127.021753][T25072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2127.032161][T25072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2127.042887][T25072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2127.053110][T25072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2127.063892][T25072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2127.074083][T25072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2127.086653][T25072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2127.101929][T25072] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2127.324635][T25072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2127.336601][T25072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2127.347951][T25072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2127.359473][T25072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2127.369752][T25072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2127.380610][T25072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2127.390817][T25072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2127.401750][T25072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2127.413080][T25072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2127.427701][T25072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2127.443291][T25072] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2127.492739][T25072] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2127.501957][T25072] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2127.511189][T25072] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2127.520265][T25072] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2127.617432][T25132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2127.646320][ T6536] wlan1: authenticate with 08:02:11:00:00:00
[ 2127.655976][ T6536] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2127.668379][  T508] wlan1: authenticated
[ 2127.696100][ T6536] mac80211_hwsim hwsim71 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
[ 2127.711084][T19633] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[ 2127.821620][  T508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2127.832319][  T508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2127.952803][T25134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2127.958342][ T2497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2127.971047][ T2497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2128.296320][T25140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2128.388326][T25141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2128.469181][T25140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2128.958094][T31328] wlan1: associate with 08:02:11:00:00:00 (try 2/3)
[ 2129.080023][T31328] wlan1: associate with 08:02:11:00:00:00 (try 3/3)
[ 2129.203804][T31328] wlan1: association with 08:02:11:00:00:00 timed out
[ 2129.321719][ T4111] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2129.629566][ T4111] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2129.771928][ T4111] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2129.919823][ T4111] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2131.629095][ T4111] hsr_slave_0: left promiscuous mode
[ 2131.646806][ T4111] hsr_slave_1: left promiscuous mode
[ 2131.671510][ T4111] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2131.679218][ T4111] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2131.729225][ T4111] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2131.737124][ T4111] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2131.806120][ T4111] bridge_slave_1: left allmulticast mode
[ 2131.812206][ T4111] bridge_slave_1: left promiscuous mode
[ 2131.818725][ T4111] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2131.847292][ T4111] bridge_slave_0: left allmulticast mode
[ 2131.853483][ T4111] bridge_slave_0: left promiscuous mode
[ 2131.860175][ T4111] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2131.960423][ T4111] veth1_macvtap: left promiscuous mode
[ 2131.966155][ T4111] veth0_macvtap: left promiscuous mode
[ 2131.972619][ T4111] veth1_vlan: left promiscuous mode
[ 2131.978136][ T4111] veth0_vlan: left promiscuous mode
[ 2132.345854][T25070] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2132.369299][T25070] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2132.382902][T25070] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2132.405291][T25070] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2132.433327][T25070] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 2132.452298][T25070] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2133.040919][ T4111] team0 (unregistering): Port device team_slave_1 removed
[ 2133.075484][ T4111] team0 (unregistering): Port device team_slave_0 removed
[ 2133.112613][ T4111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2133.145884][ T4111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2133.333309][ T4111] bond0 (unregistering): Released all slaves
[ 2134.138333][T25162] chnl_net:caif_netlink_parms(): no params data found
[ 2134.503794][T25070] Bluetooth: hci2: command 0x0409 tx timeout
[ 2135.276841][T25162] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2135.284582][T25162] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2135.292460][T25162] bridge_slave_0: entered allmulticast mode
[ 2135.301477][T25162] bridge_slave_0: entered promiscuous mode
[ 2135.372057][T25162] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2135.379893][T25162] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2135.387649][T25162] bridge_slave_1: entered allmulticast mode
[ 2135.397296][T25162] bridge_slave_1: entered promiscuous mode
[ 2135.595859][T25162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2135.623256][T25162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2135.770437][T25162] team0: Port device team_slave_0 added
[ 2135.790696][T25162] team0: Port device team_slave_1 added
[ 2135.899871][T25162] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2135.907029][T25162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2135.937649][T25162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2135.956936][T25162] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2135.964226][T25162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2135.990926][T25162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2136.158801][T25162] hsr_slave_0: entered promiscuous mode
[ 2136.176025][T25162] hsr_slave_1: entered promiscuous mode
[ 2136.189021][T25162] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2136.197348][T25162] Cannot create hsr debugfs directory
[ 2136.584510][T25070] Bluetooth: hci2: command 0x041b tx timeout
[ 2137.368003][T25162] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2137.389975][T25162] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2137.411993][T25162] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2137.434598][T25162] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2138.030121][T25162] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2138.130612][T25162] 8021q: adding VLAN 0 to HW filter on device team0
[ 2138.161134][ T2497] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2138.168919][ T2497] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2138.239786][ T2497] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2138.247395][ T2497] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2138.539445][T25162] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2138.667224][T25070] Bluetooth: hci2: command 0x040f tx timeout
[ 2138.792157][T25162] veth0_vlan: entered promiscuous mode
[ 2138.879299][T25162] veth1_vlan: entered promiscuous mode
[ 2139.052482][T25162] veth0_macvtap: entered promiscuous mode
[ 2139.082354][T25162] veth1_macvtap: entered promiscuous mode
[ 2139.143682][T25162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2139.155481][T25162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2139.165624][T25162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2139.176303][T25162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2139.186381][T25162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2139.198706][T25162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2139.208993][T25162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2139.219860][T25162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2139.229924][T25162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2139.241210][T25162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2139.256625][T25162] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2139.306059][T25162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2139.317035][T25162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2139.328520][T25162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2139.339267][T25162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2139.349420][T25162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2139.360190][T25162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2139.370317][T25162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2139.381102][T25162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2139.391189][T25162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2139.403641][T25162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2139.418549][T25162] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2139.476368][T25162] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2139.485508][T25162] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2139.494686][T25162] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2139.505649][T25162] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2139.744733][  T508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2139.753236][  T508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2139.858260][  T508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2139.866486][  T508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2140.225735][T25204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2140.241072][T31328] wlan1: authenticate with 08:02:11:00:00:00
[ 2140.250674][T31328] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2140.298908][T31328] wlan1: authenticated
[ 2140.308582][T25207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2140.321170][T31328] mac80211_hwsim hwsim75 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
[ 2140.344502][T31328] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[ 2140.362655][T25204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2140.381562][T31328] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[ 2140.390930][T31328] wlan1: associated
17:39:21 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:39:21 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

17:39:21 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x4801}, 0x0)

17:39:21 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x900000000000000}, 0x0)

17:39:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2140.745924][T25070] Bluetooth: hci2: command 0x0419 tx timeout
17:39:21 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2140.918668][T25216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:39:21 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0xa00000000000000}, 0x0)

[ 2141.072751][T25221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2141.111596][T25216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2141.172572][T25227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2141.218500][T25228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2141.219170][T25226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:39:21 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

17:39:21 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x4811}, 0x0)

[ 2141.372950][T25223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2141.410591][T25230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2141.499023][T25232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:39:21 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0xb00000000000000}, 0x0)

17:39:22 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:39:22 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x4888}, 0x0)

17:39:22 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:39:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:39:22 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

[ 2142.107622][T25241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:39:22 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0xc00000000000000}, 0x0)

[ 2142.253853][T25241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2142.328969][T25245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2142.378007][T25241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2142.460887][T25253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2142.509183][T25255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:39:22 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0xd00000000000000}, 0x0)

[ 2142.568975][T25255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2142.588635][T25245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:39:22 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x4a00}, 0x0)

[ 2142.710457][T25294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:39:23 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:39:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r3, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:39:23 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0xe00000000000000}, 0x0)

17:39:23 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:39:23 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf2501000000050037000000000006002800010000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

[ 2143.272173][T25363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:39:23 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x4a03}, 0x0)

[ 2143.424129][T25363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2143.472456][T25365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:39:23 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0xf00000000000000}, 0x0)

[ 2143.556602][T25370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2143.594233][T25363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2143.697136][T25375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2143.785936][T25373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:39:24 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x1000000000000000}, 0x0)

17:39:24 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x4c00}, 0x0)

17:39:24 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:39:24 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf2501000000050037000000000006002800010000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

17:39:24 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2144.432096][ T4111] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
17:39:25 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x1100000000000000}, 0x0)

[ 2144.763278][ T4111] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2144.838555][T25486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2144.990295][T25494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2145.105875][ T4111] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2145.320206][T25492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2145.423801][ T4111] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2147.805907][ T4111] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING)
[ 2148.291958][ T4111] hsr_slave_0: left promiscuous mode
[ 2148.320294][ T4111] hsr_slave_1: left promiscuous mode
[ 2148.366855][ T4111] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2148.374779][ T4111] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2148.405393][ T4111] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2148.414365][ T4111] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2148.446742][ T4111] bridge_slave_1: left allmulticast mode
[ 2148.452793][ T4111] bridge_slave_1: left promiscuous mode
[ 2148.459374][ T4111] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2148.959841][ T4111] bridge_slave_0: left allmulticast mode
[ 2148.965729][ T4111] bridge_slave_0: left promiscuous mode
[ 2148.972431][ T4111] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2149.012086][ T4111] veth1_macvtap: left promiscuous mode
[ 2149.017840][ T4111] veth0_macvtap: left promiscuous mode
[ 2149.023814][ T4111] veth1_vlan: left promiscuous mode
[ 2149.030274][ T4111] veth0_vlan: left promiscuous mode
[ 2149.420916][ T5012] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2149.429855][ T5012] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2149.440617][ T4999] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2149.678589][ T5012] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2149.692193][ T5012] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 2149.703405][ T5012] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2150.067037][ T5012] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2150.075991][ T5012] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2150.088064][ T5012] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2150.134730][ T5012] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2150.238326][ T5012] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2150.248098][ T5012] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2150.405046][ T4111] team0 (unregistering): Port device team_slave_1 removed
[ 2150.445653][ T4111] team0 (unregistering): Port device team_slave_0 removed
[ 2150.513209][ T4111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2150.567209][ T4111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2150.833315][ T5012] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2150.844405][ T5012] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2150.857316][ T5012] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2150.870022][ T5012] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2150.887853][ T5012] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 2150.896809][ T5012] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2150.924233][ T4111] bond0 (unregistering): Released all slaves
[ 2151.785939][ T5012] Bluetooth: hci2: command 0x0409 tx timeout
[ 2152.304725][T25612] chnl_net:caif_netlink_parms(): no params data found
[ 2152.380413][T25617] chnl_net:caif_netlink_parms(): no params data found
[ 2152.467222][T25615] chnl_net:caif_netlink_parms(): no params data found
[ 2152.499921][T25070] Bluetooth: hci3: command 0x0409 tx timeout
[ 2152.981697][ T5012] Bluetooth: hci4: command 0x0409 tx timeout
[ 2153.861110][T25070] Bluetooth: hci2: command 0x041b tx timeout
[ 2154.278945][T25617] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2154.286861][T25617] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2154.295032][T25617] bridge_slave_0: entered allmulticast mode
[ 2154.304050][T25617] bridge_slave_0: entered promiscuous mode
[ 2154.316115][T25615] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2154.323796][T25615] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2154.331915][T25615] bridge_slave_0: entered allmulticast mode
[ 2154.347192][T25615] bridge_slave_0: entered promiscuous mode
[ 2154.380715][T25612] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2154.388350][T25612] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2154.396766][T25612] bridge_slave_0: entered allmulticast mode
[ 2154.405889][T25612] bridge_slave_0: entered promiscuous mode
[ 2154.420052][T25615] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2154.427632][T25615] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2154.435626][T25615] bridge_slave_1: entered allmulticast mode
[ 2154.444891][T25615] bridge_slave_1: entered promiscuous mode
[ 2154.470686][T25612] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2154.478260][T25612] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2154.486299][T25612] bridge_slave_1: entered allmulticast mode
[ 2154.495541][T25612] bridge_slave_1: entered promiscuous mode
[ 2154.529594][T25617] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2154.537439][T25617] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2154.545634][T25617] bridge_slave_1: entered allmulticast mode
[ 2154.554799][T25617] bridge_slave_1: entered promiscuous mode
[ 2154.580037][ T5012] Bluetooth: hci3: command 0x041b tx timeout
[ 2154.931756][ T4111] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2155.044838][T25617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2155.065357][T25615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2155.085212][ T5012] Bluetooth: hci4: command 0x041b tx timeout
[ 2155.097954][T25612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2155.143307][ T4111] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2155.248387][T25617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2155.268923][T25615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2155.318043][ T4111] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2155.366847][T25612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2155.456320][ T4111] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2155.808629][T25617] team0: Port device team_slave_0 added
[ 2155.875076][T25615] team0: Port device team_slave_0 added
[ 2155.892029][T25617] team0: Port device team_slave_1 added
[ 2155.910977][T25612] team0: Port device team_slave_0 added
[ 2155.943436][T25070] Bluetooth: hci2: command 0x040f tx timeout
[ 2155.963987][T25612] team0: Port device team_slave_1 added
[ 2156.021789][T25615] team0: Port device team_slave_1 added
[ 2156.030979][T25617] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2156.038103][T25617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2156.064685][T25617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2156.243920][T25617] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2156.251552][T25617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2156.280529][T25617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2156.392508][T25612] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2156.400859][T25612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2156.427580][T25612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2156.597466][ T4111] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2156.661408][T25070] Bluetooth: hci3: command 0x040f tx timeout
[ 2156.695745][T25612] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2156.703132][T25612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2156.734316][T25612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2156.750459][T25615] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2156.757613][T25615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2156.784146][T25615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2156.921645][T25615] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2156.928797][T25615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2156.955086][T25615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2157.030282][ T4111] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2157.140801][T25070] Bluetooth: hci4: command 0x040f tx timeout
[ 2157.207315][ T4111] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2157.271344][T25617] hsr_slave_0: entered promiscuous mode
[ 2157.299008][T25617] hsr_slave_1: entered promiscuous mode
[ 2157.331951][T25617] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2157.340308][T25617] Cannot create hsr debugfs directory
[ 2157.420537][ T4111] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2157.866981][T25615] hsr_slave_0: entered promiscuous mode
[ 2157.891293][T25615] hsr_slave_1: entered promiscuous mode
[ 2157.919989][T25615] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2157.927755][T25615] Cannot create hsr debugfs directory
[ 2157.964132][T25612] hsr_slave_0: entered promiscuous mode
[ 2158.010029][T25612] hsr_slave_1: entered promiscuous mode
[ 2158.022026][T25612] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2158.029875][T25612] Cannot create hsr debugfs directory
[ 2158.046538][T25070] Bluetooth: hci2: command 0x0419 tx timeout
[ 2158.740290][ T5012] Bluetooth: hci3: command 0x0419 tx timeout
[ 2159.233799][T25070] Bluetooth: hci4: command 0x0419 tx timeout
[ 2161.620322][ T4111] hsr_slave_0: left promiscuous mode
[ 2161.664857][ T4111] hsr_slave_1: left promiscuous mode
[ 2161.682022][ T4111] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2161.690082][ T4111] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2161.717365][ T4111] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2161.728017][ T4111] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2161.747930][ T4111] bridge_slave_1: left allmulticast mode
[ 2161.754087][ T4111] bridge_slave_1: left promiscuous mode
[ 2161.760689][ T4111] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2161.788881][ T4111] bridge_slave_0: left allmulticast mode
[ 2161.795086][ T4111] bridge_slave_0: left promiscuous mode
[ 2161.801830][ T4111] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2161.849004][ T4111] hsr_slave_0: left promiscuous mode
[ 2161.858142][ T4111] hsr_slave_1: left promiscuous mode
[ 2161.886375][ T4111] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2161.894525][ T4111] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2161.923509][ T4111] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2161.934173][ T4111] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2161.951738][ T4111] bridge_slave_1: left allmulticast mode
[ 2161.957607][ T4111] bridge_slave_1: left promiscuous mode
[ 2161.964596][ T4111] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2161.982898][ T4111] bridge_slave_0: left allmulticast mode
[ 2161.988763][ T4111] bridge_slave_0: left promiscuous mode
[ 2161.995638][ T4111] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2162.107187][ T4111] veth1_macvtap: left promiscuous mode
[ 2162.113139][ T4111] veth0_macvtap: left promiscuous mode
[ 2162.118999][ T4111] veth1_vlan: left promiscuous mode
[ 2162.124676][ T4111] veth0_vlan: left promiscuous mode
[ 2162.228921][ T4111] veth1_macvtap: left promiscuous mode
[ 2162.234888][ T4111] veth0_macvtap: left promiscuous mode
[ 2162.241974][ T4111] veth1_vlan: left promiscuous mode
[ 2162.247519][ T4111] veth0_vlan: left promiscuous mode
[ 2164.136609][ T4111] team0 (unregistering): Port device team_slave_1 removed
[ 2164.213750][ T4111] team0 (unregistering): Port device team_slave_0 removed
[ 2164.244477][ T4111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2164.281033][ T4111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2164.542567][ T4111] bond0 (unregistering): Released all slaves
[ 2165.155863][ T4111] team0 (unregistering): Port device team_slave_1 removed
[ 2165.189105][ T4111] team0 (unregistering): Port device team_slave_0 removed
[ 2165.231546][ T4111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2165.270876][ T4111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2165.507972][ T4111] bond0 (unregistering): Released all slaves
[ 2166.030634][T25617] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2166.052162][T25617] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2166.082290][T25617] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2166.117769][T25617] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2166.405552][T25615] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2166.489001][T25615] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2166.531172][T25612] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 2166.568032][T25615] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2166.610708][T25612] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2166.640772][T25615] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2166.687992][T25612] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2166.757666][T25612] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2167.285166][T25617] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2167.455105][T25617] 8021q: adding VLAN 0 to HW filter on device team0
[ 2167.541370][ T2497] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2167.548973][ T2497] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2167.666931][ T2497] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2167.674695][ T2497] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2167.817246][T25615] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2167.976116][T25615] 8021q: adding VLAN 0 to HW filter on device team0
[ 2168.065941][ T2497] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2168.073678][ T2497] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2168.238490][ T2497] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2168.246252][ T2497] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2168.287689][T25612] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2168.326410][T25617] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2168.551846][T25612] 8021q: adding VLAN 0 to HW filter on device team0
[ 2168.604291][T25615] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2168.643218][T19633] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2168.650942][T19633] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2168.778694][T19633] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2168.786441][T19633] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2168.907450][T25617] veth0_vlan: entered promiscuous mode
[ 2169.015427][T25615] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2169.083940][T25617] veth1_vlan: entered promiscuous mode
[ 2169.446749][T25617] veth0_macvtap: entered promiscuous mode
[ 2169.532154][T25615] veth0_vlan: entered promiscuous mode
[ 2169.567170][T25617] veth1_macvtap: entered promiscuous mode
[ 2169.643266][T25612] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2169.759004][T25617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2169.769953][T25617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2169.781613][T25617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2169.792665][T25617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2169.802788][T25617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2169.816253][T25617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2169.831794][T25617] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2169.874690][T25615] veth1_vlan: entered promiscuous mode
[ 2170.211347][T25612] veth0_vlan: entered promiscuous mode
[ 2170.227842][T25617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2170.239284][T25617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2170.249544][T25617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2170.260604][T25617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2170.270730][T25617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2170.281550][T25617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2170.296380][T25617] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2170.346912][T25615] veth0_macvtap: entered promiscuous mode
[ 2170.398423][T25617] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2170.407816][T25617] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2170.417205][T25617] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2170.428115][T25617] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2170.516256][T25612] veth1_vlan: entered promiscuous mode
[ 2170.540373][T25615] veth1_macvtap: entered promiscuous mode
[ 2170.701071][ T2497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2170.709125][ T2497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2170.887383][T25615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2170.898325][T25615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2170.912587][T25615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2170.923611][T25615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2170.933710][T25615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2170.947635][T25615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2170.958730][T25615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2170.969711][T25615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2170.984921][T25615] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2171.050420][T25615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2171.061431][T25615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2171.071604][T25615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2171.082345][T25615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2171.092598][T25615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2171.103336][T25615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2171.113548][T25615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2171.124297][T25615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2171.139400][T25615] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2171.154411][ T2497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2171.162704][ T2497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2171.256586][T25615] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2171.266401][T25615] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2171.275590][T25615] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2171.284673][T25615] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2171.320931][T25612] veth0_macvtap: entered promiscuous mode
[ 2171.382534][T25612] veth1_macvtap: entered promiscuous mode
[ 2171.537006][T25612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2171.547961][T25612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2171.559450][T25612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2171.570357][T25612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2171.580618][T25612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2171.591309][T25612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2171.601535][T25612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2171.612257][T25612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2171.622468][T25612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2171.633172][T25612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2171.648275][T25612] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2171.718433][T25701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2171.817189][T25702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2171.904481][ T5060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2171.913304][ T5060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2171.991104][ T5060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2171.994635][T25701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2171.999062][ T5060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2172.015841][T25612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2172.029091][T25612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2172.039235][T25612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2172.050236][T25612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2172.060394][T25612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2172.073568][T25612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2172.083891][T25612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2172.094576][T25612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2172.104726][T25612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2172.115526][T25612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2172.131939][T25612] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2172.264438][T25612] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2172.276130][T25612] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2172.285475][T25612] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2172.294613][T25612] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2172.619439][T25706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2172.648555][T19946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2172.656764][T19946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2172.771431][T25706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2172.808396][ T6455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2172.817037][ T6455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2172.880016][T25707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2173.132420][T25710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2173.172592][T13978] wlan1: authenticate with 08:02:11:00:00:00
[ 2173.182141][T13978] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2173.206129][T25711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2173.213646][T19946] wlan1: authenticated
[ 2173.254846][T13978] mac80211_hwsim hwsim81 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
[ 2173.271378][T19946] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[ 2173.338448][ T6536] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[ 2173.347636][ T6536] wlan1: associated
[ 2173.409042][T25711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2173.823822][T23634] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2173.975617][T23634] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2174.156583][T23634] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2174.289222][T23634] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2176.113228][T23634] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING)
[ 2176.438277][T23634] hsr_slave_0: left promiscuous mode
[ 2176.446786][T23634] hsr_slave_1: left promiscuous mode
[ 2176.457439][T23634] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2176.465268][T23634] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2176.489621][T23634] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2176.497497][T23634] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2176.529008][T23634] bridge_slave_1: left allmulticast mode
[ 2176.535075][T23634] bridge_slave_1: left promiscuous mode
[ 2176.541700][T23634] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2176.593332][T23634] bridge_slave_0: left allmulticast mode
[ 2176.599218][T23634] bridge_slave_0: left promiscuous mode
[ 2176.606937][T23634] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2176.681171][T23634] veth1_macvtap: left promiscuous mode
[ 2176.686913][T23634] veth0_macvtap: left promiscuous mode
[ 2176.694673][T23634] veth1_vlan: left promiscuous mode
[ 2176.700308][T23634] veth0_vlan: left promiscuous mode
[ 2177.451106][ T5012] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2177.468233][ T4999] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2177.483050][ T4999] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2177.501512][ T4999] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2177.520790][ T4999] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 2177.531017][ T4999] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2178.280598][T23634] team0 (unregistering): Port device team_slave_1 removed
[ 2178.341116][T23634] team0 (unregistering): Port device team_slave_0 removed
[ 2178.389028][T23634] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2178.457201][T23634] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2178.793507][T23634] bond0 (unregistering): Released all slaves
[ 2179.619941][T25070] Bluetooth: hci2: command 0x0409 tx timeout
[ 2179.761093][T25747] chnl_net:caif_netlink_parms(): no params data found
[ 2179.954044][ T1218] ieee802154 phy0 wpan0: encryption failed: -22
[ 2179.960868][ T1218] ieee802154 phy1 wpan1: encryption failed: -22
[ 2180.664314][T25747] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2180.676750][T25747] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2180.684926][T25747] bridge_slave_0: entered allmulticast mode
[ 2180.693901][T25747] bridge_slave_0: entered promiscuous mode
[ 2180.762034][T25747] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2180.769826][T25747] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2180.782441][T25747] bridge_slave_1: entered allmulticast mode
[ 2180.791458][T25747] bridge_slave_1: entered promiscuous mode
[ 2181.014250][T25747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2181.034061][T25747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2181.184855][T25747] team0: Port device team_slave_0 added
[ 2181.210687][T25747] team0: Port device team_slave_1 added
[ 2181.376052][T25747] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2181.383434][T25747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2181.412126][T25747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2181.438948][T25747] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2181.446200][T25747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2181.472744][T25747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2181.635077][T25747] hsr_slave_0: entered promiscuous mode
[ 2181.644939][T25747] hsr_slave_1: entered promiscuous mode
[ 2181.654883][T25747] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2181.663093][T25747] Cannot create hsr debugfs directory
[ 2181.700235][ T4999] Bluetooth: hci2: command 0x041b tx timeout
[ 2182.738494][T25747] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 2182.768487][T25747] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2182.797929][T25747] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2182.841090][T25747] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2183.378173][T25747] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2183.448337][T25747] 8021q: adding VLAN 0 to HW filter on device team0
[ 2183.484388][T19633] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2183.492139][T19633] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2183.561621][T19633] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2183.569234][T19633] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2183.788168][T25070] Bluetooth: hci2: command 0x040f tx timeout
[ 2183.903602][T25747] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2184.088604][T25747] veth0_vlan: entered promiscuous mode
[ 2184.147691][T25747] veth1_vlan: entered promiscuous mode
[ 2184.327318][T25747] veth0_macvtap: entered promiscuous mode
[ 2184.358964][T25747] veth1_macvtap: entered promiscuous mode
[ 2184.444086][T25747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2184.462131][T25747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2184.472696][T25747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2184.483383][T25747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2184.493542][T25747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2184.504525][T25747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2184.514736][T25747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2184.525591][T25747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2184.535757][T25747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2184.546561][T25747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2184.565846][T25747] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2184.624221][T25747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2184.635965][T25747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2184.646224][T25747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2184.656982][T25747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2184.673377][T25747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2184.685511][T25747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2184.695601][T25747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2184.706367][T25747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2184.716410][T25747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2184.727145][T25747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2184.743729][T25747] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2184.799461][T25747] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2184.809127][T25747] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2184.818326][T25747] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2184.829393][T25747] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2185.051732][T19946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2185.067115][T19946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2185.188295][T19946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2185.197535][T19946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2185.594886][T25799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2185.617332][ T6536] wlan1: authenticate with 08:02:11:00:00:00
[ 2185.626964][ T6536] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2185.730177][ T6536] wlan1: authenticated
[ 2185.738639][ T6536] mac80211_hwsim hwsim83 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
[ 2185.750501][T25802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2185.761326][T19633] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[ 2185.831242][T19946] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[ 2185.841195][T19946] wlan1: associated
[ 2185.847035][T25799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2185.861095][T25070] Bluetooth: hci2: command 0x0419 tx timeout
17:40:06 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r3, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:40:06 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x5201}, 0x0)

17:40:06 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf2501000000050037000000000006002800010000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

17:40:06 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x1200000000000000}, 0x0)

17:40:06 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:40:06 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2186.437160][T25813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:40:06 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x2500000000000000}, 0x0)

[ 2186.539397][T25816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:40:06 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x5865}, 0x0)

[ 2186.646442][T25813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2186.744903][T25826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2186.849386][T25826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2186.887509][T25813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2186.995949][T25816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2187.009129][T25826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:40:07 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x6000000000000000}, 0x0)

17:40:07 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r8, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r9 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r9, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

17:40:07 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:40:07 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x6000}, 0x0)

17:40:07 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r3, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:40:07 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x6558000000000000}, 0x0)

[ 2187.647441][T20536] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2187.905475][T20536] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2188.035089][T25948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:40:08 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x8100000000000000}, 0x0)

[ 2188.178407][T25948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2188.202447][T20536] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2188.253427][T26002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2188.327960][T25990] wlan1: authenticate with 08:02:11:00:00:00
[ 2188.339346][T25990] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2188.364764][T25948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2188.490018][T22596] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[ 2188.522004][T20536] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2188.522821][T22596] wlan1: authenticated
17:40:08 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r8, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r9 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r9, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

[ 2188.546188][T26051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2188.618961][T22596] mac80211_hwsim hwsim83 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
[ 2188.646204][ T2497] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[ 2188.681143][T26002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2188.694921][ T2497] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[ 2188.705312][ T2497] wlan1: associated
[ 2190.928010][T20536] hsr_slave_0: left promiscuous mode
[ 2190.947068][T20536] hsr_slave_1: left promiscuous mode
[ 2190.955954][T20536] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2190.964093][T20536] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2191.014329][T20536] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2191.022194][T20536] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2191.040127][T20536] bridge_slave_1: left allmulticast mode
[ 2191.046009][T20536] bridge_slave_1: left promiscuous mode
[ 2191.052729][T20536] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2191.074470][T20536] bridge_slave_0: left allmulticast mode
[ 2191.080578][T20536] bridge_slave_0: left promiscuous mode
[ 2191.087155][T20536] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2191.152765][T20536] veth1_macvtap: left promiscuous mode
[ 2191.158583][T20536] veth0_macvtap: left promiscuous mode
[ 2191.164718][T20536] veth1_vlan: left promiscuous mode
[ 2191.170927][T20536] veth0_vlan: left promiscuous mode
[ 2192.118443][T25070] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2192.146510][T25070] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2192.156844][T25070] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2192.180873][T25070] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2192.203610][T25070] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 2192.237832][T25070] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2192.825600][T20536] team0 (unregistering): Port device team_slave_1 removed
[ 2192.867836][T20536] team0 (unregistering): Port device team_slave_0 removed
[ 2192.915424][T20536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2192.968180][T20536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2193.177415][T20536] bond0 (unregistering): Released all slaves
[ 2194.086730][T26180] chnl_net:caif_netlink_parms(): no params data found
[ 2194.341520][ T4999] Bluetooth: hci4: command 0x0409 tx timeout
[ 2195.159285][T26180] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2195.167119][T26180] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2195.175007][T26180] bridge_slave_0: entered allmulticast mode
[ 2195.183872][T26180] bridge_slave_0: entered promiscuous mode
[ 2195.215280][T26180] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2195.223094][T26180] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2195.231003][T26180] bridge_slave_1: entered allmulticast mode
[ 2195.239898][T26180] bridge_slave_1: entered promiscuous mode
[ 2195.498338][T26180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2195.550395][T26180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2195.711244][T26180] team0: Port device team_slave_0 added
[ 2195.743694][T26180] team0: Port device team_slave_1 added
[ 2195.993999][T26180] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2196.001401][T26180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2196.031586][T26180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2196.050274][T26180] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2196.057474][T26180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2196.084273][T26180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2196.204543][T26180] hsr_slave_0: entered promiscuous mode
[ 2196.218227][T26180] hsr_slave_1: entered promiscuous mode
[ 2196.228205][T26180] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2196.239980][T26180] Cannot create hsr debugfs directory
[ 2196.425490][T25070] Bluetooth: hci4: command 0x041b tx timeout
[ 2197.518079][T26180] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2197.559942][T26180] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2197.594027][T26180] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2197.644573][T26180] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2198.168949][T26180] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2198.241959][T26180] 8021q: adding VLAN 0 to HW filter on device team0
[ 2198.275479][ T6536] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2198.283412][ T6536] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2198.346488][ T6536] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2198.353980][ T6536] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2198.503557][T25070] Bluetooth: hci4: command 0x040f tx timeout
[ 2198.704761][T26180] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2198.906120][T26180] veth0_vlan: entered promiscuous mode
[ 2198.954557][T26180] veth1_vlan: entered promiscuous mode
[ 2199.123147][T26180] veth0_macvtap: entered promiscuous mode
[ 2199.154813][T26180] veth1_macvtap: entered promiscuous mode
[ 2199.214366][T26180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2199.225216][T26180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2199.235451][T26180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2199.246237][T26180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2199.256464][T26180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2199.267340][T26180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2199.277490][T26180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2199.288221][T26180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2199.298961][T26180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2199.312586][T26180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2199.327926][T26180] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2199.398433][T26180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2199.411694][T26180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2199.424312][T26180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2199.435098][T26180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2199.445180][T26180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2199.456009][T26180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2199.466229][T26180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2199.476943][T26180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2199.487041][T26180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2199.497826][T26180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2199.515433][T26180] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2199.591624][T26180] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2199.605074][T26180] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2199.618796][T26180] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2199.628234][T26180] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2199.868378][T19633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2199.876710][T19633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2199.990903][ T6536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2199.998959][ T6536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2200.177998][T26232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2200.196399][T26232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2200.215266][T26232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:40:20 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:40:20 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:40:20 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x81ffffff00000000}, 0x0)

17:40:20 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r3, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:40:20 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r8, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r9 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r9, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

17:40:20 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x60ff}, 0x0)

[ 2200.611076][ T4999] Bluetooth: hci4: command 0x0419 tx timeout
[ 2200.814606][T26243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:40:21 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x8847000000000000}, 0x0)

[ 2200.992396][T26243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2201.074789][T26249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:40:21 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r8, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r9 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r9, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

[ 2201.116261][T26243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2201.191850][T26249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2201.197016][T26237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:40:21 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x6558}, 0x0)

17:40:21 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x8848000000000000}, 0x0)

[ 2201.542731][T26249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:40:22 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:40:22 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x6800}, 0x0)

[ 2202.080856][   T10] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
17:40:22 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x88a8ffff00000000}, 0x0)

[ 2202.339357][   T10] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2202.412789][T26359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2202.545009][T26371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2202.572839][   T10] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2202.607501][T26367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2202.725748][   T10] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2204.784795][   T10] hsr_slave_0: left promiscuous mode
[ 2204.808561][   T10] hsr_slave_1: left promiscuous mode
[ 2204.837158][   T10] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2204.846546][   T10] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2204.874527][   T10] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2204.883858][   T10] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2204.931872][   T10] bridge_slave_1: left allmulticast mode
[ 2204.940992][   T10] bridge_slave_1: left promiscuous mode
[ 2204.947465][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2204.982880][   T10] bridge_slave_0: left allmulticast mode
[ 2204.988814][   T10] bridge_slave_0: left promiscuous mode
[ 2204.995799][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2205.085382][   T10] veth1_macvtap: left promiscuous mode
[ 2205.091545][   T10] veth0_macvtap: left promiscuous mode
[ 2205.097397][   T10] veth1_vlan: left promiscuous mode
[ 2205.103113][   T10] veth0_vlan: left promiscuous mode
[ 2206.240138][T25070] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2206.254882][ T5012] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2206.263719][ T5012] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2206.315742][ T5012] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2206.336968][ T5012] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 2206.347561][ T5012] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2207.099353][   T10] team0 (unregistering): Port device team_slave_1 removed
[ 2207.198103][   T10] team0 (unregistering): Port device team_slave_0 removed
[ 2207.316998][   T10] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2207.431125][   T10] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2207.557071][ T4999] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2207.569504][ T4999] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2207.579513][ T4999] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2207.593741][ T4999] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2207.608819][T25070] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 2207.617882][T25070] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2207.787861][   T10] bond0 (unregistering): Released all slaves
[ 2208.446752][T25070] Bluetooth: hci2: command 0x0409 tx timeout
[ 2208.791088][T26402] chnl_net:caif_netlink_parms(): no params data found
[ 2209.098924][T26395] chnl_net:caif_netlink_parms(): no params data found
[ 2209.701333][T25070] Bluetooth: hci4: command 0x0409 tx timeout
[ 2209.919318][T26402] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2209.927160][T26402] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2209.935144][T26402] bridge_slave_0: entered allmulticast mode
[ 2209.944055][T26402] bridge_slave_0: entered promiscuous mode
[ 2210.055889][T26402] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2210.067937][T26402] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2210.076873][T26402] bridge_slave_1: entered allmulticast mode
[ 2210.085929][T26402] bridge_slave_1: entered promiscuous mode
[ 2210.424750][T26402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2210.434876][T26395] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2210.442866][T26395] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2210.450951][T26395] bridge_slave_0: entered allmulticast mode
[ 2210.460085][T26395] bridge_slave_0: entered promiscuous mode
[ 2210.501104][T26402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2210.511129][T25070] Bluetooth: hci2: command 0x041b tx timeout
[ 2210.525207][T26395] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2210.533478][T26395] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2210.541512][T26395] bridge_slave_1: entered allmulticast mode
[ 2210.550442][T26395] bridge_slave_1: entered promiscuous mode
[ 2210.834133][T26395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2210.853175][T26402] team0: Port device team_slave_0 added
[ 2210.880242][T26395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2210.900296][T26402] team0: Port device team_slave_1 added
[ 2211.323011][   T10] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2211.366061][T26395] team0: Port device team_slave_0 added
[ 2211.375721][T26402] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2211.383895][T26402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2211.413800][T26402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2211.432356][T26395] team0: Port device team_slave_1 added
[ 2211.540197][   T10] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2211.579202][T26402] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2211.586945][T26402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2211.616884][T26402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2211.735201][T26395] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2211.742523][T26395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2211.768852][T26395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2211.781618][T25070] Bluetooth: hci4: command 0x041b tx timeout
[ 2211.874412][   T10] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2211.933254][T26395] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2211.950072][T26395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2211.982200][T26395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2212.101791][   T10] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2212.205052][T26402] hsr_slave_0: entered promiscuous mode
[ 2212.227080][T26402] hsr_slave_1: entered promiscuous mode
[ 2212.245697][T26402] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2212.253701][T26402] Cannot create hsr debugfs directory
[ 2212.470276][T26395] hsr_slave_0: entered promiscuous mode
[ 2212.493547][T26395] hsr_slave_1: entered promiscuous mode
[ 2212.527531][T26395] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2212.535534][T26395] Cannot create hsr debugfs directory
[ 2212.581096][T25070] Bluetooth: hci2: command 0x040f tx timeout
[ 2213.866807][ T5012] Bluetooth: hci4: command 0x040f tx timeout
[ 2214.663728][ T5012] Bluetooth: hci2: command 0x0419 tx timeout
[ 2214.861917][   T10] hsr_slave_0: left promiscuous mode
[ 2214.910035][   T10] hsr_slave_1: left promiscuous mode
[ 2214.934163][   T10] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2214.942449][   T10] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2214.965684][   T10] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2214.975929][   T10] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2215.001544][   T10] bridge_slave_1: left allmulticast mode
[ 2215.007400][   T10] bridge_slave_1: left promiscuous mode
[ 2215.014063][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2215.038448][   T10] bridge_slave_0: left allmulticast mode
[ 2215.044544][   T10] bridge_slave_0: left promiscuous mode
[ 2215.051204][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2215.116927][   T10] veth1_macvtap: left promiscuous mode
[ 2215.122789][   T10] veth0_macvtap: left promiscuous mode
[ 2215.128625][   T10] veth1_vlan: left promiscuous mode
[ 2215.134728][   T10] veth0_vlan: left promiscuous mode
[ 2215.950203][T25070] Bluetooth: hci4: command 0x0419 tx timeout
[ 2216.337879][   T10] team0 (unregistering): Port device team_slave_1 removed
[ 2216.381475][   T10] team0 (unregistering): Port device team_slave_0 removed
[ 2216.449399][   T10] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2216.493271][   T10] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2216.733322][   T10] bond0 (unregistering): Released all slaves
[ 2217.293607][T26402] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2217.322150][T26402] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2217.348671][T26402] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2217.470016][T26402] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2217.495289][T26395] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 2217.525617][T26395] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2217.567716][T26395] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2217.611482][T26395] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2218.418808][T26395] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2218.593949][T26395] 8021q: adding VLAN 0 to HW filter on device team0
[ 2218.613852][T26402] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2218.677778][ T6455] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2218.685508][ T6455] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2218.769460][T26402] 8021q: adding VLAN 0 to HW filter on device team0
[ 2218.799756][ T6455] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2218.807362][ T6455] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2218.929438][ T6455] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2218.937152][ T6455] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2219.078069][ T6455] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2219.085780][ T6455] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2219.164637][T26395] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2219.247736][T26402] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 2219.258420][T26402] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2219.513488][T26395] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2219.642370][T26402] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2220.019770][T26395] veth0_vlan: entered promiscuous mode
[ 2220.122521][T26395] veth1_vlan: entered promiscuous mode
[ 2220.150297][T26402] veth0_vlan: entered promiscuous mode
[ 2220.242655][T26402] veth1_vlan: entered promiscuous mode
[ 2220.386740][T26395] veth0_macvtap: entered promiscuous mode
[ 2220.436363][T26395] veth1_macvtap: entered promiscuous mode
[ 2220.496403][T26402] veth0_macvtap: entered promiscuous mode
[ 2220.572716][T26395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2220.585939][T26395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2220.596288][T26395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2220.609810][T26395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2220.621113][T26395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2220.633326][T26395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2220.643590][T26395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2220.654378][T26395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2220.669573][T26395] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2220.685184][T26402] veth1_macvtap: entered promiscuous mode
[ 2220.777566][T26402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2220.790015][T26402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2220.801257][T26402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2220.814746][T26402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2220.825243][T26402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2220.836005][T26402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2220.846254][T26402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2220.857212][T26402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2220.867416][T26402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2220.878145][T26402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2220.893256][T26402] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2220.936325][T26402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2220.947682][T26402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2220.957943][T26402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2220.968760][T26402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2220.978886][T26402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2220.990082][T26402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2221.000324][T26402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2221.011200][T26402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2221.028983][T26402] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2221.052304][T26395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2221.064232][T26395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2221.075462][T26395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2221.087667][T26395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2221.098806][T26395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2221.110229][T26395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2221.122569][T26395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2221.133502][T26395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2221.144018][T26395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2221.154798][T26395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2221.169806][T26395] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2221.208582][T26402] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2221.219197][T26402] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2221.233726][T26402] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2221.244336][T26402] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2221.282259][T26395] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2221.291457][T26395] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2221.300730][T26395] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2221.309834][T26395] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2221.633607][ T2497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2221.642558][ T2497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2221.858112][ T2497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2221.868751][ T2497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2221.962089][ T9153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2221.970517][ T9153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2222.088973][ T9153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2222.098081][ T9153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2222.362083][T26468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2222.500494][T26472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2222.620814][T26472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2222.722683][T26472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2223.512171][T20536] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2223.925776][T20536] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2224.067736][T20536] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2224.184690][T20536] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2225.891446][T20536] hsr_slave_0: left promiscuous mode
[ 2225.899610][T20536] hsr_slave_1: left promiscuous mode
[ 2225.915975][T20536] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2225.925176][T20536] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2225.943549][T20536] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2225.951452][T20536] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2225.967511][T20536] bridge_slave_1: left allmulticast mode
[ 2225.973566][T20536] bridge_slave_1: left promiscuous mode
[ 2225.980390][T20536] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2226.014935][T20536] bridge_slave_0: left allmulticast mode
[ 2226.036851][T20536] bridge_slave_0: left promiscuous mode
[ 2226.043859][T20536] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2226.227621][T20536] veth1_macvtap: left promiscuous mode
[ 2226.233416][T20536] veth0_macvtap: left promiscuous mode
[ 2226.241605][T20536] veth1_vlan: left promiscuous mode
[ 2226.247141][T20536] veth0_vlan: left promiscuous mode
[ 2226.791776][T25070] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2226.801658][T25070] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2226.812044][T25070] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2226.844541][T25070] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2226.868055][ T4999] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 2226.879016][ T4999] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2227.420365][T20536] team0 (unregistering): Port device team_slave_1 removed
[ 2227.456242][T20536] team0 (unregistering): Port device team_slave_0 removed
[ 2227.488998][T20536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2227.523953][T20536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2227.713763][T20536] bond0 (unregistering): Released all slaves
[ 2228.641621][T26499] chnl_net:caif_netlink_parms(): no params data found
[ 2228.980586][ T4999] Bluetooth: hci4: command 0x0409 tx timeout
[ 2229.447810][T26499] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2229.455677][T26499] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2229.463605][T26499] bridge_slave_0: entered allmulticast mode
[ 2229.472538][T26499] bridge_slave_0: entered promiscuous mode
[ 2229.496172][T26499] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2229.504033][T26499] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2229.514978][T26499] bridge_slave_1: entered allmulticast mode
[ 2229.524120][T26499] bridge_slave_1: entered promiscuous mode
[ 2229.679372][T26499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2229.713708][T26499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2229.841197][T26499] team0: Port device team_slave_0 added
[ 2229.858915][T26499] team0: Port device team_slave_1 added
[ 2229.998014][T26499] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2230.005332][T26499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2230.034096][T26499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2230.057801][T26499] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2230.065105][T26499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2230.092007][T26499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2230.224623][T26499] hsr_slave_0: entered promiscuous mode
[ 2230.246108][T26499] hsr_slave_1: entered promiscuous mode
[ 2230.254873][T26499] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2230.263148][T26499] Cannot create hsr debugfs directory
[ 2231.059939][ T5012] Bluetooth: hci4: command 0x041b tx timeout
[ 2231.486223][T26499] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2231.508282][T26499] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2231.531287][T26499] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2231.566829][T26499] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2232.096531][T26499] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2232.192927][T26499] 8021q: adding VLAN 0 to HW filter on device team0
[ 2232.227507][T31328] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2232.235256][T31328] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2232.307927][T31328] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2232.315740][T31328] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2232.632364][T26499] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2232.837618][T26499] veth0_vlan: entered promiscuous mode
[ 2232.909168][T26499] veth1_vlan: entered promiscuous mode
[ 2233.069068][T26499] veth0_macvtap: entered promiscuous mode
[ 2233.117898][T26499] veth1_macvtap: entered promiscuous mode
[ 2233.141521][ T5012] Bluetooth: hci4: command 0x040f tx timeout
[ 2233.217487][T26499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2233.228390][T26499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2233.238690][T26499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2233.249484][T26499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2233.259717][T26499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2233.270489][T26499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2233.280683][T26499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2233.291499][T26499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2233.306030][T26499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2233.317156][T26499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2233.332287][T26499] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2233.367383][T26499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2233.378898][T26499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2233.389143][T26499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2233.399903][T26499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2233.414323][T26499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2233.425423][T26499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2233.435590][T26499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2233.446393][T26499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2233.456565][T26499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2233.468055][T26499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2233.483247][T26499] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2233.529472][T26499] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2233.539414][T26499] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2233.550678][T26499] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2233.560187][T26499] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2233.868206][T31328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2233.876418][T31328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2233.942574][T22596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2233.951711][T22596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2234.216883][T26539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2234.238881][T26539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2234.281035][T26539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:40:54 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:40:54 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r8, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r9 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r9, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

17:40:54 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x6c00}, 0x0)

17:40:54 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x9d113ce700000000}, 0x0)

17:40:54 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:40:54 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r3, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2234.927414][T26552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:40:55 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0)

[ 2234.977380][T26555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2235.128210][T26558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:40:55 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x7400}, 0x0)

[ 2235.181111][T26552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2235.219967][ T5012] Bluetooth: hci4: command 0x0419 tx timeout
[ 2235.256390][T26555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2235.384720][T26552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2235.387509][T26603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2235.415317][T26555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:40:55 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0xfa0f000000000000}, 0x0)

17:40:55 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r8, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r9 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r9, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

17:40:56 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:40:56 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x7a00}, 0x0)

17:40:56 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:40:56 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0xffffff7f00000000}, 0x0)

[ 2236.292869][ T4111] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2236.448484][T26715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2236.474743][T26723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2236.552499][ T4111] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2236.655830][T26783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2236.691017][T26784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2236.772027][T26783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2236.811171][ T4111] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
17:40:57 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

17:40:57 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0xffffffff00000000}, 0x0)

[ 2237.050946][T26719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2237.103775][ T4111] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
17:40:57 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x8100}, 0x0)

[ 2239.914638][ T4111] hsr_slave_0: left promiscuous mode
[ 2239.924144][ T4111] hsr_slave_1: left promiscuous mode
[ 2239.946100][ T4111] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2239.954240][ T4111] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2239.977582][ T4111] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2239.985563][ T4111] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2240.007053][ T4111] bridge_slave_1: left allmulticast mode
[ 2240.013230][ T4111] bridge_slave_1: left promiscuous mode
[ 2240.020045][ T4111] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2240.039931][ T4111] bridge_slave_0: left allmulticast mode
[ 2240.045824][ T4111] bridge_slave_0: left promiscuous mode
[ 2240.052642][ T4111] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2240.096131][ T4111] veth1_macvtap: left promiscuous mode
[ 2240.102321][ T4111] veth0_macvtap: left promiscuous mode
[ 2240.108176][ T4111] veth1_vlan: left promiscuous mode
[ 2240.114239][ T4111] veth0_vlan: left promiscuous mode
[ 2241.395078][ T1218] ieee802154 phy0 wpan0: encryption failed: -22
[ 2241.401862][ T1218] ieee802154 phy1 wpan1: encryption failed: -22
[ 2241.428847][ T4999] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2241.437980][ T4999] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2241.453147][ T4999] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2241.479905][ T4999] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2241.493056][ T4999] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 2241.505636][ T4999] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2241.720823][ T4999] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2241.729590][ T4999] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2241.751998][ T4999] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2241.812414][ T4999] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2241.839183][ T4999] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 2241.869207][ T4999] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2241.998842][ T4111] team0 (unregistering): Port device team_slave_1 removed
[ 2242.051326][ T4111] team0 (unregistering): Port device team_slave_0 removed
[ 2242.135326][ T4111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2242.178225][ T4111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2242.378402][ T4111] bond0 (unregistering): Released all slaves
[ 2243.443698][T26912] chnl_net:caif_netlink_parms(): no params data found
[ 2243.539861][ T5012] Bluetooth: hci2: command 0x0409 tx timeout
[ 2243.679194][T26915] chnl_net:caif_netlink_parms(): no params data found
[ 2243.943052][ T5012] Bluetooth: hci4: command 0x0409 tx timeout
[ 2244.883213][T26912] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2244.891960][T26912] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2244.899962][T26912] bridge_slave_0: entered allmulticast mode
[ 2244.908854][T26912] bridge_slave_0: entered promiscuous mode
[ 2245.036705][ T4111] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2245.096720][T26912] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2245.105213][T26912] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2245.113177][T26912] bridge_slave_1: entered allmulticast mode
[ 2245.122095][T26912] bridge_slave_1: entered promiscuous mode
[ 2245.277401][ T4111] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2245.308551][T26915] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2245.317367][T26915] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2245.325378][T26915] bridge_slave_0: entered allmulticast mode
[ 2245.334373][T26915] bridge_slave_0: entered promiscuous mode
[ 2245.403334][ T4111] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2245.442463][T26912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2245.452900][T26915] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2245.461794][T26915] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2245.469560][T26915] bridge_slave_1: entered allmulticast mode
[ 2245.478418][T26915] bridge_slave_1: entered promiscuous mode
[ 2245.538010][ T4111] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2245.581031][T26912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2245.622805][ T5012] Bluetooth: hci2: command 0x041b tx timeout
[ 2245.917452][T26915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2245.932296][T26912] team0: Port device team_slave_0 added
[ 2245.948780][T26912] team0: Port device team_slave_1 added
[ 2246.021048][ T5012] Bluetooth: hci4: command 0x041b tx timeout
[ 2246.108404][T26915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2246.178259][T26912] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2246.186744][T26912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2246.217627][T26912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2246.326884][T26912] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2246.334327][T26912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2246.360891][T26912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2246.525549][T26915] team0: Port device team_slave_0 added
[ 2246.621965][T26915] team0: Port device team_slave_1 added
[ 2246.842280][T26912] hsr_slave_0: entered promiscuous mode
[ 2246.853302][T26912] hsr_slave_1: entered promiscuous mode
[ 2246.865389][T26912] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2246.873446][T26912] Cannot create hsr debugfs directory
[ 2246.908855][T26915] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2246.916243][T26915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2246.946651][T26915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2247.055746][T26915] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2247.063072][T26915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2247.089536][T26915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2247.596176][T26915] hsr_slave_0: entered promiscuous mode
[ 2247.627669][T26915] hsr_slave_1: entered promiscuous mode
[ 2247.651873][T26915] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2247.660018][T26915] Cannot create hsr debugfs directory
[ 2247.700006][ T4999] Bluetooth: hci2: command 0x040f tx timeout
[ 2248.101941][ T4999] Bluetooth: hci4: command 0x040f tx timeout
[ 2248.795808][ T4111] hsr_slave_0: left promiscuous mode
[ 2248.830136][ T4111] hsr_slave_1: left promiscuous mode
[ 2248.850669][ T4111] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2248.858418][ T4111] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2248.885780][ T4111] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2248.893627][ T4111] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2248.906733][ T4111] bridge_slave_1: left allmulticast mode
[ 2248.912824][ T4111] bridge_slave_1: left promiscuous mode
[ 2248.919335][ T4111] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2248.948840][ T4111] bridge_slave_0: left allmulticast mode
[ 2248.954919][ T4111] bridge_slave_0: left promiscuous mode
[ 2248.962005][ T4111] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2249.017488][ T4111] veth1_macvtap: left promiscuous mode
[ 2249.023382][ T4111] veth0_macvtap: left promiscuous mode
[ 2249.029232][ T4111] veth1_vlan: left promiscuous mode
[ 2249.035427][ T4111] veth0_vlan: left promiscuous mode
[ 2249.790852][ T4999] Bluetooth: hci2: command 0x0419 tx timeout
[ 2250.180844][ T4999] Bluetooth: hci4: command 0x0419 tx timeout
[ 2250.288259][ T4111] team0 (unregistering): Port device team_slave_1 removed
[ 2250.348786][ T4111] team0 (unregistering): Port device team_slave_0 removed
[ 2250.386483][ T4111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2250.445366][ T4111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2250.795451][ T4111] bond0 (unregistering): Released all slaves
[ 2251.629076][T26912] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 2251.751791][T26912] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2251.870053][T26912] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2251.931389][T26912] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2252.303553][T26915] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2252.386101][T26915] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2252.459917][T26915] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2252.523562][T26915] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2252.868352][T26912] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2253.046386][T26912] 8021q: adding VLAN 0 to HW filter on device team0
[ 2253.106869][T13978] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2253.114717][T13978] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2253.225603][T13978] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2253.233308][T13978] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2253.677270][T26915] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2253.764474][T26915] 8021q: adding VLAN 0 to HW filter on device team0
[ 2253.789295][T26912] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2253.843352][ T6536] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2253.851134][ T6536] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2253.930872][ T6536] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2253.938577][ T6536] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2254.218452][T26912] veth0_vlan: entered promiscuous mode
[ 2254.365531][T26912] veth1_vlan: entered promiscuous mode
[ 2254.416491][T26915] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2254.637792][T26912] veth0_macvtap: entered promiscuous mode
[ 2254.689378][T26912] veth1_macvtap: entered promiscuous mode
[ 2254.786963][T26915] veth0_vlan: entered promiscuous mode
[ 2254.855292][T26912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2254.867269][T26912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2254.877629][T26912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2254.888347][T26912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2254.898464][T26912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2254.911698][T26912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2254.922033][T26912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2254.933003][T26912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2254.947932][T26912] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2255.025039][T26915] veth1_vlan: entered promiscuous mode
[ 2255.047950][T26912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2255.060278][T26912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2255.070567][T26912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2255.081348][T26912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2255.091601][T26912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2255.102294][T26912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2255.117045][T26912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2255.128403][T26912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2255.145054][T26912] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2255.220761][T26912] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2255.231824][T26912] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2255.242510][T26912] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2255.251625][T26912] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2255.439244][T26915] veth0_macvtap: entered promiscuous mode
[ 2255.548639][T26915] veth1_macvtap: entered promiscuous mode
[ 2255.637967][T26915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2255.649476][T26915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2255.660664][T26915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2255.672078][T26915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2255.682644][T26915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2255.694026][T26915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2255.704846][T26915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2255.716087][T26915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2255.726905][T26915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2255.741423][T26915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2255.756970][T26915] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2255.801616][T13978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2255.810617][T13978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2255.936204][T13978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2255.945141][T13978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2256.066726][T26915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2256.078802][T26915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2256.088953][T26915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2256.099713][T26915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2256.109888][T26915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2256.122284][T26915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2256.132441][T26915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2256.145543][T26915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2256.155892][T26915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2256.166631][T26915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2256.181896][T26915] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2256.288965][T26915] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2256.298317][T26915] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2256.310483][T26915] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2256.319502][T26915] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2256.466967][T26978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2256.594298][T26979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2256.708830][T13978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2256.709176][T26979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2256.717282][T13978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2256.948401][T13978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2256.960969][T13978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
17:41:17 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r3, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:41:17 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:41:17 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0xffffffffff600000}, 0x0)

17:41:17 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x8802}, 0x0)

17:41:17 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

[ 2257.440623][T26990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2257.654990][T26994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2257.834528][T26996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2257.859530][T27000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2257.876036][T27001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2257.961335][T26994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2257.975968][T27003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2258.421871][   T10] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
17:41:18 executing program 3:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:41:18 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}}, 0x0)

17:41:18 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

17:41:18 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x8847}, 0x0)

17:41:18 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r3, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2258.662985][   T10] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2258.871970][   T10] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2258.942427][T27016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2259.093209][   T10] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2259.121335][T27029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:41:19 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2}, 0x0)

17:41:19 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x8848}, 0x0)

[ 2259.342774][T27050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2259.433115][T27037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2259.625724][T27037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:41:19 executing program 3:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2260.061722][T27127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2260.152856][T27129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2260.227693][T27127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2261.506011][   T10] hsr_slave_0: left promiscuous mode
[ 2261.518570][   T10] hsr_slave_1: left promiscuous mode
[ 2261.534269][   T10] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2261.543589][   T10] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2261.566758][   T10] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2261.574870][   T10] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2261.593864][   T10] bridge_slave_1: left allmulticast mode
[ 2261.599934][   T10] bridge_slave_1: left promiscuous mode
[ 2261.606399][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2261.628172][   T10] bridge_slave_0: left allmulticast mode
[ 2261.634170][   T10] bridge_slave_0: left promiscuous mode
[ 2261.640847][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2261.691226][   T10] veth1_macvtap: left promiscuous mode
[ 2261.696977][   T10] veth0_macvtap: left promiscuous mode
[ 2261.704746][   T10] veth1_vlan: left promiscuous mode
[ 2261.710369][   T10] veth0_vlan: left promiscuous mode
[ 2262.807306][ T5012] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2262.834016][ T5012] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2262.846624][ T5012] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2262.873196][ T5012] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2262.891719][ T5012] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2262.909981][ T5012] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2263.155537][   T10] team0 (unregistering): Port device team_slave_1 removed
[ 2263.190069][   T10] team0 (unregistering): Port device team_slave_0 removed
[ 2263.219881][   T10] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2263.257552][   T10] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2263.443940][   T10] bond0 (unregistering): Released all slaves
[ 2264.210233][T27146] chnl_net:caif_netlink_parms(): no params data found
[ 2265.000072][ T4999] Bluetooth: hci3: command 0x0409 tx timeout
[ 2265.041469][T27146] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2265.050167][T27146] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2265.057895][T27146] bridge_slave_0: entered allmulticast mode
[ 2265.068549][T27146] bridge_slave_0: entered promiscuous mode
[ 2265.091313][T27146] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2265.098900][T27146] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2265.107458][T27146] bridge_slave_1: entered allmulticast mode
[ 2265.118152][T27146] bridge_slave_1: entered promiscuous mode
[ 2265.236241][T27146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2265.270414][T27146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2265.432349][T27146] team0: Port device team_slave_0 added
[ 2265.477727][T27146] team0: Port device team_slave_1 added
[ 2265.620134][T27146] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2265.627275][T27146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2265.653839][T27146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2265.691034][T27146] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2265.698193][T27146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2265.726560][T27146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2265.944764][T27146] hsr_slave_0: entered promiscuous mode
[ 2265.958568][T27146] hsr_slave_1: entered promiscuous mode
[ 2265.976832][T27146] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2265.984973][T27146] Cannot create hsr debugfs directory
[ 2267.100160][ T5012] Bluetooth: hci3: command 0x041b tx timeout
[ 2267.173640][T27146] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2267.195408][T27146] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2267.226041][T27146] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2267.248307][T27146] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2267.831822][T27146] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2267.935866][T27146] 8021q: adding VLAN 0 to HW filter on device team0
[ 2267.972580][ T5060] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2267.980407][ T5060] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2268.048051][ T5060] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2268.055754][ T5060] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2268.390349][T27146] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2268.615927][T27146] veth0_vlan: entered promiscuous mode
[ 2268.668842][T27146] veth1_vlan: entered promiscuous mode
[ 2268.800681][T27146] veth0_macvtap: entered promiscuous mode
[ 2268.840028][T27146] veth1_macvtap: entered promiscuous mode
[ 2268.953462][T27146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2268.964266][T27146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2268.974861][T27146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2268.985742][T27146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2268.995878][T27146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2269.006558][T27146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2269.016797][T27146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2269.027567][T27146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2269.037653][T27146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2269.049277][T27146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2269.064519][T27146] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2269.108930][T27146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2269.120999][T27146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2269.131332][T27146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2269.149449][T27146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2269.153543][ T5012] Bluetooth: hci3: command 0x040f tx timeout
[ 2269.160677][T27146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2269.176315][T27146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2269.186550][T27146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2269.197478][T27146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2269.207611][T27146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2269.218450][T27146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2269.233777][T27146] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2269.299398][T27146] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2269.310142][T27146] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2269.319152][T27146] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2269.328344][T27146] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2269.599759][ T9153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2269.607823][ T9153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2269.735065][T22596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2269.743230][T22596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2269.983945][T27188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2270.065395][T27190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2270.149451][T27188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:41:30 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:41:30 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x3}, 0x0)

17:41:30 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

17:41:30 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x9a05}, 0x0)

17:41:30 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r3, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:41:30 executing program 3:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2270.815392][T27203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2270.819523][T27204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2270.904293][T27208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:41:31 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0)

17:41:31 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x9c01}, 0x0)

[ 2271.019398][T27213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2271.068300][T27209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2271.073588][T27204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2271.112690][T27203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:41:31 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

[ 2271.160821][T27212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2271.220375][ T5012] Bluetooth: hci3: command 0x0419 tx timeout
[ 2271.281287][T27212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:41:31 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x0)

17:41:31 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:41:32 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0xce00}, 0x0)

17:41:32 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:41:32 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r3, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:41:32 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

17:41:32 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x6}, 0x0)

[ 2271.973593][T27223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2272.124982][T27228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2272.136403][T27229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2272.164918][T27230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:41:32 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0xdc03}, 0x0)

[ 2272.259265][T27228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2272.269234][T27230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2272.333301][T27233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2272.455516][T27228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:41:32 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

17:41:32 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x7}, 0x0)

17:41:32 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:41:33 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0xe003}, 0x0)

17:41:33 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:41:33 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8}, 0x0)

17:41:33 executing program 2:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r3, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2272.984185][T27244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2273.068334][T27246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:41:33 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

[ 2273.164459][T27244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2273.212874][T27251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:41:33 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x9}, 0x0)

[ 2273.341252][T27251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2273.360423][T27252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:41:33 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0xff7f}, 0x0)

[ 2273.480559][T27254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:41:33 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2273.827562][ T4111] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
17:41:34 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

17:41:34 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(0x0, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:41:34 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xa}, 0x0)

[ 2274.083595][ T4111] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2274.288613][T27267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2274.316106][ T4111] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
17:41:34 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x34000}, 0x0)

17:41:34 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xb}, 0x0)

[ 2274.497877][ T4111] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2274.596058][T27272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:41:35 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc}, 0x0)

17:41:35 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(0x0, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2275.688631][T27384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2277.180658][ T4111] hsr_slave_0: left promiscuous mode
[ 2277.209731][ T4111] hsr_slave_1: left promiscuous mode
[ 2277.218333][ T4111] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2277.226387][ T4111] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2277.269034][ T4111] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2277.276924][ T4111] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2277.290087][ T4111] bridge_slave_1: left allmulticast mode
[ 2277.296053][ T4111] bridge_slave_1: left promiscuous mode
[ 2277.302898][ T4111] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2277.355837][ T4111] bridge_slave_0: left allmulticast mode
[ 2277.362057][ T4111] bridge_slave_0: left promiscuous mode
[ 2277.368716][ T4111] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2277.417527][ T4111] veth1_macvtap: left promiscuous mode
[ 2277.423626][ T4111] veth0_macvtap: left promiscuous mode
[ 2277.430404][ T4111] veth1_vlan: left promiscuous mode
[ 2277.436769][ T4111] veth0_vlan: left promiscuous mode
[ 2278.485151][ T4999] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2278.496187][ T4999] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2278.570866][ T4999] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2278.655092][ T4999] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2278.877087][ T4999] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 2278.885952][ T4999] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2278.956421][ T4111] team0 (unregistering): Port device team_slave_1 removed
[ 2279.015959][ T4111] team0 (unregistering): Port device team_slave_0 removed
[ 2279.064519][ T4111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2279.154735][ T4111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2279.328181][ T5012] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2279.337449][ T5012] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2279.348302][T25070] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2279.361801][ T5012] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2279.387846][ T5012] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 2279.396872][ T5012] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2279.546131][ T4111] bond0 (unregistering): Released all slaves
[ 2280.852896][T27405] chnl_net:caif_netlink_parms(): no params data found
[ 2280.876876][T27402] chnl_net:caif_netlink_parms(): no params data found
[ 2280.985444][ T4999] Bluetooth: hci2: command 0x0409 tx timeout
[ 2281.461166][ T4999] Bluetooth: hci4: command 0x0409 tx timeout
[ 2282.308778][T27405] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2282.317263][T27405] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2282.325559][T27405] bridge_slave_0: entered allmulticast mode
[ 2282.334470][T27405] bridge_slave_0: entered promiscuous mode
[ 2282.375763][T27405] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2282.384081][T27405] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2282.392073][T27405] bridge_slave_1: entered allmulticast mode
[ 2282.401151][T27405] bridge_slave_1: entered promiscuous mode
[ 2282.410315][T27402] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2282.417883][T27402] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2282.425833][T27402] bridge_slave_0: entered allmulticast mode
[ 2282.434777][T27402] bridge_slave_0: entered promiscuous mode
[ 2282.567095][T27405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2282.590662][T27402] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2282.598260][T27402] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2282.606354][T27402] bridge_slave_1: entered allmulticast mode
[ 2282.616287][T27402] bridge_slave_1: entered promiscuous mode
[ 2282.657055][T27405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2282.731055][ T4111] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2282.991752][ T4111] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2283.067111][ T4999] Bluetooth: hci2: command 0x041b tx timeout
[ 2283.091166][T27402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2283.181882][ T4111] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2283.216221][T27405] team0: Port device team_slave_0 added
[ 2283.235981][T27402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2283.371923][T27405] team0: Port device team_slave_1 added
[ 2283.403476][ T4111] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2283.550020][ T4999] Bluetooth: hci4: command 0x041b tx timeout
[ 2283.576079][T27402] team0: Port device team_slave_0 added
[ 2283.592901][T27402] team0: Port device team_slave_1 added
[ 2283.655238][T27405] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2283.662529][T27405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2283.689821][T27405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2283.706507][T27405] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2283.714100][T27405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2283.740443][T27405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2283.930179][T27402] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2283.937359][T27402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2283.966333][T27402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2284.035559][T27402] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2284.043263][T27402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2284.069551][T27402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2284.301797][T27405] hsr_slave_0: entered promiscuous mode
[ 2284.327569][T27405] hsr_slave_1: entered promiscuous mode
[ 2284.336382][T27405] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2284.344368][T27405] Cannot create hsr debugfs directory
[ 2284.494486][T27402] hsr_slave_0: entered promiscuous mode
[ 2284.510453][T27402] hsr_slave_1: entered promiscuous mode
[ 2284.518081][T27402] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2284.526356][T27402] Cannot create hsr debugfs directory
[ 2285.141191][ T4999] Bluetooth: hci2: command 0x040f tx timeout
[ 2285.620176][ T4999] Bluetooth: hci4: command 0x040f tx timeout
[ 2285.867541][ T4111] hsr_slave_0: left promiscuous mode
[ 2285.884875][ T4111] hsr_slave_1: left promiscuous mode
[ 2285.908374][ T4111] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2285.916807][ T4111] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2285.940006][ T4111] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2285.947787][ T4111] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2285.975329][ T4111] bridge_slave_1: left allmulticast mode
[ 2285.981370][ T4111] bridge_slave_1: left promiscuous mode
[ 2285.987886][ T4111] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2286.017990][ T4111] bridge_slave_0: left allmulticast mode
[ 2286.024189][ T4111] bridge_slave_0: left promiscuous mode
[ 2286.031139][ T4111] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2286.145127][ T4111] veth1_macvtap: left promiscuous mode
[ 2286.150992][ T4111] veth0_macvtap: left promiscuous mode
[ 2286.156854][ T4111] veth1_vlan: left promiscuous mode
[ 2286.162549][ T4111] veth0_vlan: left promiscuous mode
[ 2287.220833][ T5012] Bluetooth: hci2: command 0x0419 tx timeout
[ 2287.588733][ T4111] team0 (unregistering): Port device team_slave_1 removed
[ 2287.636896][ T4111] team0 (unregistering): Port device team_slave_0 removed
[ 2287.692421][ T4111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2287.714033][ T5012] Bluetooth: hci4: command 0x0419 tx timeout
[ 2287.767474][ T4111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2287.994028][ T4111] bond0 (unregistering): Released all slaves
[ 2289.603780][T27402] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 2289.642892][T27405] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2289.682843][T27402] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2289.713789][T27405] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2289.750280][T27402] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2289.780564][T27405] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2289.823709][T27402] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2289.862566][T27405] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2290.810505][T27405] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2290.844150][T27402] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2290.942881][T27405] 8021q: adding VLAN 0 to HW filter on device team0
[ 2290.979592][T27402] 8021q: adding VLAN 0 to HW filter on device team0
[ 2291.025083][T19946] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2291.032886][T19946] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2291.088146][T19946] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2291.095853][T19946] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2291.183678][T19946] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2291.191380][T19946] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2291.285777][T19946] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2291.293496][T19946] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2291.687841][T27405] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2291.755819][T27402] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2292.046382][T27405] veth0_vlan: entered promiscuous mode
[ 2292.192764][T27405] veth1_vlan: entered promiscuous mode
[ 2292.218854][T27402] veth0_vlan: entered promiscuous mode
[ 2292.379199][T27402] veth1_vlan: entered promiscuous mode
[ 2292.416516][T27405] veth0_macvtap: entered promiscuous mode
[ 2292.501560][T27405] veth1_macvtap: entered promiscuous mode
[ 2292.616960][T27405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2292.629487][T27405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2292.641156][T27405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2292.651983][T27405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2292.662114][T27405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2292.672812][T27405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2292.682934][T27405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2292.697907][T27405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2292.713488][T27405] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2292.755174][T27405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2292.765930][T27405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2292.776256][T27405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2292.787164][T27405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2292.801690][T27405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2292.812959][T27405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2292.823194][T27405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2292.833940][T27405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2292.848870][T27405] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2292.881852][T27402] veth0_macvtap: entered promiscuous mode
[ 2292.940530][T27405] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2292.949510][T27405] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2292.958568][T27405] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2292.967616][T27405] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2293.021335][T27402] veth1_macvtap: entered promiscuous mode
[ 2293.151008][T27402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2293.161949][T27402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2293.172190][T27402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2293.183001][T27402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2293.193096][T27402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2293.203840][T27402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2293.217107][T27402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2293.229083][T27402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2293.239259][T27402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2293.250005][T27402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2293.265268][T27402] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2293.437606][ T5060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2293.446797][ T5060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2293.577709][ T5060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2293.587005][ T5060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2293.648009][T27402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2293.658914][T27402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2293.669085][T27402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2293.679865][T27402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2293.690059][T27402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2293.700794][T27402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2293.711015][T27402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2293.724176][T27402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2293.734556][T27402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2293.745288][T27402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2293.760800][T27402] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2293.841077][T27402] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2293.851833][T27402] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2293.861996][T27402] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2293.871070][T27402] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2294.099093][T27467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2294.137736][T27468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2294.176537][ T5060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2294.186388][ T5060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2294.266105][T27467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2294.288593][ T5060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2294.296782][ T5060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2294.574023][T27472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2294.684594][T27472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2294.764347][T27475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:41:55 executing program 2:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r3, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:41:55 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x3ffff}, 0x0)

17:41:55 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xd}, 0x0)

17:41:55 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(0x0, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:41:55 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, 0x0, 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

17:41:55 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2295.443172][T27485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2295.509223][T27495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2295.565517][T27487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:41:55 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xe}, 0x0)

17:41:55 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x40000}, 0x0)

[ 2295.623215][T27498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:41:55 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, 0x0, 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

[ 2295.735946][T27498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2295.813795][T27485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:41:56 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x0)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:41:56 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf}, 0x0)

17:41:56 executing program 2:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r3, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:41:56 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x100000}, 0x0)

17:41:56 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, 0x0, 0xa00, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

[ 2296.518634][T27507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2296.598546][ T4111] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2296.706099][T27513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:41:57 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0)

[ 2296.830376][T27513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2296.854406][ T4111] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2296.881785][T27515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2297.033830][T27521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2297.074077][ T4111] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2297.143190][T27520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:41:57 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x400300}, 0x0)

17:41:57 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x0)

[ 2297.335874][ T4111] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2299.325981][ T4111] hsr_slave_0: left promiscuous mode
[ 2299.346122][ T4111] hsr_slave_1: left promiscuous mode
[ 2299.368221][ T4111] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2299.376070][ T4111] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2299.402138][ T4111] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2299.410051][ T4111] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2299.430961][ T4111] bridge_slave_1: left allmulticast mode
[ 2299.436922][ T4111] bridge_slave_1: left promiscuous mode
[ 2299.443686][ T4111] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2299.469339][ T4111] bridge_slave_0: left allmulticast mode
[ 2299.475697][ T4111] bridge_slave_0: left promiscuous mode
[ 2299.482452][ T4111] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2299.537997][ T4111] veth1_macvtap: left promiscuous mode
[ 2299.543849][ T4111] veth0_macvtap: left promiscuous mode
[ 2299.549877][ T4111] veth1_vlan: left promiscuous mode
[ 2299.559178][ T4111] veth0_vlan: left promiscuous mode
[ 2300.647990][ T5012] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2300.657108][ T5012] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2300.668180][ T5012] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2300.680225][ T5012] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2300.697619][ T5012] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 2300.706551][ T5012] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2300.884102][ T4111] team0 (unregistering): Port device team_slave_1 removed
[ 2300.930587][ T4111] team0 (unregistering): Port device team_slave_0 removed
[ 2300.956673][ T4111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2300.990564][ T4111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2301.205578][ T4111] bond0 (unregistering): Released all slaves
[ 2302.117654][T27646] chnl_net:caif_netlink_parms(): no params data found
[ 2302.740358][ T5012] Bluetooth: hci4: command 0x0409 tx timeout
[ 2302.835974][ T1218] ieee802154 phy0 wpan0: encryption failed: -22
[ 2302.843595][ T1218] ieee802154 phy1 wpan1: encryption failed: -22
[ 2303.088845][T27646] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2303.096696][T27646] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2303.104826][T27646] bridge_slave_0: entered allmulticast mode
[ 2303.113904][T27646] bridge_slave_0: entered promiscuous mode
[ 2303.128415][T27646] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2303.136177][T27646] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2303.146974][T27646] bridge_slave_1: entered allmulticast mode
[ 2303.155898][T27646] bridge_slave_1: entered promiscuous mode
[ 2303.273297][T27646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2303.297730][T27646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2303.388725][T27646] team0: Port device team_slave_0 added
[ 2303.414510][T27646] team0: Port device team_slave_1 added
[ 2303.531914][T27646] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2303.539068][T27646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2303.567772][T27646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2303.601362][T27646] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2303.608524][T27646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2303.635030][T27646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2303.777785][T27646] hsr_slave_0: entered promiscuous mode
[ 2303.797823][T27646] hsr_slave_1: entered promiscuous mode
[ 2303.813783][T27646] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2303.822138][T27646] Cannot create hsr debugfs directory
[ 2304.826698][ T4999] Bluetooth: hci4: command 0x041b tx timeout
[ 2304.828950][T27646] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2304.854903][T27646] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2304.876921][T27646] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2304.911830][T27646] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2305.490211][T27646] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2305.585747][T27646] 8021q: adding VLAN 0 to HW filter on device team0
[ 2305.626253][T22596] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2305.633969][T22596] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2305.687037][T22596] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2305.694855][T22596] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2306.031867][T27646] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2306.297482][T27646] veth0_vlan: entered promiscuous mode
[ 2306.381934][T27646] veth1_vlan: entered promiscuous mode
[ 2306.540928][T27646] veth0_macvtap: entered promiscuous mode
[ 2306.587710][T27646] veth1_macvtap: entered promiscuous mode
[ 2306.647385][T27646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2306.658179][T27646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2306.670347][T27646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2306.681110][T27646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2306.691216][T27646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2306.702000][T27646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2306.712132][T27646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2306.725451][T27646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2306.735884][T27646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2306.746706][T27646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2306.761707][T27646] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2306.814645][T27646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2306.828260][T27646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2306.840170][T27646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2306.850984][T27646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2306.861129][T27646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2306.871906][T27646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2306.882089][T27646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2306.892887][T27646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2306.903252][T27646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2306.903954][ T5012] Bluetooth: hci4: command 0x040f tx timeout
[ 2306.916792][T27646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2306.937759][T27646] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2306.985267][T27646] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2306.994495][T27646] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2307.005253][T27646] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2307.014438][T27646] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2307.193248][T19633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2307.202092][T19633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2307.327552][T19633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2307.335719][T19633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2307.556775][T27694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2307.577319][T27694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2307.597717][T27694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:42:08 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:42:08 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x0)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:42:08 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

17:42:08 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r4, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:42:08 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x12}, 0x0)

17:42:08 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x1000000}, 0x0)

[ 2308.218505][T27707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2308.240045][T27705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:42:08 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x25}, 0x0)

[ 2308.329311][T27711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2308.426334][T27707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2308.514222][T27712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:42:08 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x5)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7b98, @local, 0x8}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
sendmmsg(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x10d}], 0x10}}], 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r2, &(0x7f0000000ea9)=""/407, 0x197)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250100000005003700000000000600280001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0)
openat$cgroup_ro(r2, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r9, 0x500, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x3b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x406c014}, 0x20000801)
dup2(0xffffffffffffffff, r3)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="c78f83049379"}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x56})

17:42:08 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x2000000}, 0x0)

[ 2308.615138][T27714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2308.642383][T27707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2308.700752][T27700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
17:42:09 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x60}, 0x0)

[ 2308.981525][ T4999] Bluetooth: hci4: command 0x0419 tx timeout
17:42:09 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

17:42:09 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r4, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, '@\a\x00', @short="429f74512bb9cd54"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ab}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2309.351832][ T6495] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2309.596136][ T6495] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
17:42:09 executing program 1:
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x300}, 0x0)

[ 2309.643680][T27835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2309.743003][T27837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2309.762087][T27836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2309.835662][T27808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2309.887369][T27836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2309.912952][ T6495] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2310.092832][ T6495] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2310.132971][T27841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2311.991084][ T6495] hsr_slave_0: left promiscuous mode
[ 2311.999391][ T6495] hsr_slave_1: left promiscuous mode
[ 2312.016846][ T6495] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2312.026634][ T6495] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2312.058947][ T6495] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2312.067665][ T6495] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2312.090018][ T6495] bridge_slave_1: left allmulticast mode
[ 2312.095879][ T6495] bridge_slave_1: left promiscuous mode
[ 2312.102664][ T6495] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2312.124191][ T6495] bridge_slave_0: left allmulticast mode
[ 2312.130286][ T6495] bridge_slave_0: left promiscuous mode
[ 2312.136791][ T6495] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2312.188432][ T6495] veth1_macvtap: left promiscuous mode
[ 2312.194549][ T6495] veth0_macvtap: left promiscuous mode
[ 2312.201124][ T6495] veth1_vlan: left promiscuous mode
[ 2312.206643][ T6495] veth0_vlan: left promiscuous mode
[ 2313.352186][ T4999] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2313.368239][ T4999] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2313.391929][T25070] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2313.416744][T25070] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2313.462436][T25070] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2313.488210][T25070] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2313.828906][ T6495] team0 (unregistering): Port device team_slave_1 removed
[ 2313.867250][ T6495] team0 (unregistering): Port device team_slave_0 removed
[ 2313.915570][ T6495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2313.946487][ T6495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2314.143389][ T6495] bond0 (unregistering): Released all slaves
[ 2314.944432][T27863] chnl_net:caif_netlink_parms(): no params data found
[ 2315.621961][T25070] Bluetooth: hci3: command 0x0409 tx timeout
[ 2315.817985][T27863] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2315.825731][T27863] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2315.833597][T27863] bridge_slave_0: entered allmulticast mode
[ 2315.845649][T27863] bridge_slave_0: entered promiscuous mode
[ 2315.880081][T27863] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2315.887684][T27863] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2315.896066][T27863] bridge_slave_1: entered allmulticast mode
[ 2315.905023][T27863] bridge_slave_1: entered promiscuous mode
[ 2316.026167][T27863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2316.081371][T27863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2316.259392][T27863] team0: Port device team_slave_0 added
[ 2316.300196][T27863] team0: Port device team_slave_1 added
[ 2316.454030][T27863] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2316.461509][T27863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2316.487963][T27863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2316.536077][T27863] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2316.543392][T27863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2316.573876][T27863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2316.721619][T27863] hsr_slave_0: entered promiscuous mode
[ 2316.738568][T27863] hsr_slave_1: entered promiscuous mode
[ 2316.749869][T27863] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2316.760500][T27863] Cannot create hsr debugfs directory
[ 2317.700558][ T5012] Bluetooth: hci3: command 0x041b tx timeout
[ 2317.973244][T27863] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2318.000838][T27863] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2318.022804][T27863] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2318.044682][T27863] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2318.665374][T27863] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2318.777469][T27863] 8021q: adding VLAN 0 to HW filter on device team0
[ 2318.846845][T23549] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2318.854620][T23549] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2318.885283][T23549] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2318.893070][T23549] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2319.105306][T27863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2319.291437][T27863] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2319.530263][T27863] veth0_vlan: entered promiscuous mode
[ 2319.572557][T27863] veth1_vlan: entered promiscuous mode
[ 2319.736791][T27863] veth0_macvtap: entered promiscuous mode
[ 2319.778780][T27863] veth1_macvtap: entered promiscuous mode
[ 2319.779977][ T5012] Bluetooth: hci3: command 0x040f tx timeout
[ 2319.884042][T27863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2319.895747][T27863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2319.906902][T27863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2319.917875][T27863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2319.927982][T27863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2319.941462][T27863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2319.953589][T27863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2319.965060][T27863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2319.975197][T27863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2319.985966][T27863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2320.001118][T27863] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2320.083980][T27863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2320.095570][T27863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2320.108834][T27863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2320.122794][T27863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2320.133055][T27863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2320.146558][T27863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2320.156904][T27863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2320.167678][T27863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2320.177897][T27863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2320.188690][T27863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2320.203719][T27863] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2320.276017][T27863] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2320.285221][T27863] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2320.294452][T27863] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2320.303579][T27863] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2320.495202][ T2497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2320.504140][ T2497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2320.618885][T13978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2320.627513][T13978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2320.875641][T27908] =====================================================
[ 2320.883146][T27908] BUG: KMSAN: uninit-value in hwsim_cloned_frame_received_nl+0x1350/0x1410
[ 2320.892269][T27908]  hwsim_cloned_frame_received_nl+0x1350/0x1410
[ 2320.899599][T27908]  genl_rcv_msg+0x1328/0x13c0
[ 2320.904660][T27908]  netlink_rcv_skb+0x371/0x650
[ 2320.909869][T27908]  genl_rcv+0x40/0x60
[ 2320.914045][T27908]  netlink_unicast+0xf28/0x1230
[ 2320.919155][T27908]  netlink_sendmsg+0x122f/0x13d0
[ 2320.924506][T27908]  __sys_sendto+0x781/0xa30
[ 2320.929199][T27908]  __x64_sys_sendto+0x125/0x1c0
[ 2320.934398][T27908]  do_syscall_64+0x41/0xc0
[ 2320.939020][T27908]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2320.945444][T27908] 
[ 2320.947878][T27908] Uninit was created at:
[ 2320.953534][T27908]  slab_post_alloc_hook+0x12f/0xb70
[ 2320.964720][T27908]  kmem_cache_alloc_node+0x577/0xa80
[ 2320.970878][T27908]  kmalloc_reserve+0x148/0x470
[ 2320.975833][T27908]  __alloc_skb+0x318/0x740
[ 2320.980694][T27908]  hwsim_cloned_frame_received_nl+0x1b7/0x1410
[ 2320.987073][T27908]  genl_rcv_msg+0x1328/0x13c0
[ 2320.992113][T27908]  netlink_rcv_skb+0x371/0x650
[ 2320.997074][T27908]  genl_rcv+0x40/0x60
[ 2321.001340][T27908]  netlink_unicast+0xf28/0x1230
[ 2321.006385][T27908]  netlink_sendmsg+0x122f/0x13d0
[ 2321.011663][T27908]  __sys_sendto+0x781/0xa30
[ 2321.016352][T27908]  __x64_sys_sendto+0x125/0x1c0
[ 2321.021480][T27908]  do_syscall_64+0x41/0xc0
[ 2321.026083][T27908]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2321.032553][T27908] 
[ 2321.034962][T27908] CPU: 1 PID: 27908 Comm: syz-executor.4 Not tainted 6.5.0-rc7-syzkaller-00024-g93f5de5f648d #0
[ 2321.045642][T27908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
[ 2321.055997][T27908] =====================================================
[ 2321.068907][T27908] Disabling lock debugging due to kernel taint
[ 2321.075503][T27908] Kernel panic - not syncing: kmsan.panic set ...
[ 2321.082037][T27908] CPU: 1 PID: 27908 Comm: syz-executor.4 Tainted: G    B              6.5.0-rc7-syzkaller-00024-g93f5de5f648d #0
[ 2321.094110][T27908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
[ 2321.104309][T27908] Call Trace:
[ 2321.107682][T27908]  <TASK>
[ 2321.110718][T27908]  dump_stack_lvl+0x1bf/0x240
[ 2321.115607][T27908]  dump_stack+0x1e/0x20
[ 2321.119953][T27908]  panic+0x4d5/0xc70
[ 2321.124026][T27908]  ? add_taint+0x108/0x1a0
[ 2321.128605][T27908]  kmsan_report+0x2d0/0x2d0
[ 2321.133501][T27908]  ? __msan_warning+0x96/0x110
[ 2321.138461][T27908]  ? hwsim_cloned_frame_received_nl+0x1350/0x1410
[ 2321.145112][T27908]  ? genl_rcv_msg+0x1328/0x13c0
[ 2321.150170][T27908]  ? netlink_rcv_skb+0x371/0x650
[ 2321.155294][T27908]  ? genl_rcv+0x40/0x60
[ 2321.159638][T27908]  ? netlink_unicast+0xf28/0x1230
[ 2321.164846][T27908]  ? netlink_sendmsg+0x122f/0x13d0
[ 2321.170153][T27908]  ? __sys_sendto+0x781/0xa30
[ 2321.175020][T27908]  ? __x64_sys_sendto+0x125/0x1c0
[ 2321.181187][T27908]  ? do_syscall_64+0x41/0xc0
[ 2321.185970][T27908]  ? entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2321.192252][T27908]  ? kmem_cache_alloc_node+0x587/0xa80
[ 2321.197895][T27908]  ? kmsan_get_shadow_origin_ptr+0x4d/0xa0
[ 2321.203925][T27908]  ? __rcu_read_unlock+0x7a/0xd0
[ 2321.209057][T27908]  ? get_hwsim_data_ref_from_addr+0x628/0x660
[ 2321.215362][T27908]  ? kmsan_get_shadow_origin_ptr+0x4d/0xa0
[ 2321.221404][T27908]  __msan_warning+0x96/0x110
[ 2321.226201][T27908]  hwsim_cloned_frame_received_nl+0x1350/0x1410
[ 2321.232886][T27908]  ? hwsim_register_received_nl+0x330/0x330
[ 2321.239089][T27908]  genl_rcv_msg+0x1328/0x13c0
[ 2321.243972][T27908]  ? filter_irq_stacks+0x164/0x1a0
[ 2321.249294][T27908]  ? hwsim_register_received_nl+0x330/0x330
[ 2321.255441][T27908]  netlink_rcv_skb+0x371/0x650
[ 2321.260419][T27908]  ? genl_bind+0x450/0x450
[ 2321.265042][T27908]  ? genl_pernet_exit+0x60/0x60
[ 2321.270109][T27908]  genl_rcv+0x40/0x60
[ 2321.274279][T27908]  netlink_unicast+0xf28/0x1230
[ 2321.279334][T27908]  netlink_sendmsg+0x122f/0x13d0
[ 2321.284582][T27908]  ? netlink_getsockopt+0x990/0x990
[ 2321.289975][T27908]  __sys_sendto+0x781/0xa30
[ 2321.294669][T27908]  ? kmsan_get_shadow_origin_ptr+0x4d/0xa0
[ 2321.300697][T27908]  ? xfd_validate_state+0x89/0x210
[ 2321.306013][T27908]  __x64_sys_sendto+0x125/0x1c0
[ 2321.311071][T27908]  do_syscall_64+0x41/0xc0
[ 2321.315679][T27908]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2321.321777][T27908] RIP: 0033:0x7fabe8e7e7dc
[ 2321.326323][T27908] Code: 1a 51 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 60 51 02 00 48 8b
[ 2321.346130][T27908] RSP: 002b:00007fabe9b1cf70 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[ 2321.354720][T27908] RAX: ffffffffffffffda RBX: 00007fabe9b1d030 RCX: 00007fabe8e7e7dc
[ 2321.362852][T27908] RDX: 0000000000000034 RSI: 00007fabe9b1d080 RDI: 0000000000000005
[ 2321.370972][T27908] RBP: 0000000000000000 R08: 00007fabe9b1cfc4 R09: 000000000000000c
[ 2321.379170][T27908] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[ 2321.387284][T27908] R13: 0000000000000000 R14: 00007fabe9b1d080 R15: 0000000000000000
[ 2321.395412][T27908]  </TASK>
[ 2321.398778][T27908] Kernel Offset: disabled
[ 2321.403179][T27908] Rebooting in 86400 seconds..