)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {0x7a}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:21:47 executing program 0:
syz_mount_image$cramfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1, 0x140, &(0x7f0000000200)="$eJzszEFLImEcx/Hv7Myuy66uLhlYkAUdGhJzHLFbB40kIRsovHQSbKJAMxKiYwXdOvQCPFRCJ/EQHTuUdbEUwl6H0CHoWIwjiBEdOj+fyzDf/8Nvbqap4gEZ22whv7VtFovm6tiSkUosX1xe/bO6A/jdd7ffX8dg3foq0N4HK9+6YG0jZ05lCznrvx0DFYj/tbuG/faP1bx2C3ebOg61Qbvpn7RItw0rEHf39t5OYcLa+9/bewF2S4Fq5X6xUU8GJ89HZA6TgdEBqb/7zSM9MVR2+mTS5t0Z8c79KVQPPoaqlVazkVowUkYzouvTES2sadGW8dBIRveOUeadO7DyYe8XPr+ShgMJShJUOvf2jeQCaievRt7t8ALPmx6QvrpkM76f5YzX8wNZRUIQBEEQBEEQBEEQvuk9AAD//2iQbNs=")
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001a80)={{{@in=@local, @in6=@private0}}, {{@in=@private}, 0x0, @in=@remote}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000001c40)='./file0/file0\x00', &(0x7f0000001c80), 0x0)

03:21:47 executing program 1:
r0 = memfd_create(&(0x7f0000000140)='\x00\xac=\x9d\xf2\xdb\xe6\xbf\xb4\x91\x1b\x80\x93\x81v\xc5o\xa4k\x012>\xa1\x9c\x86x\x1c\xb3\xd9L\xccc\xecR\xd6\xe8\xf1Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x8c!\xb9ew\xce\xdd8$m\x1d\x8b:\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00Y\x8f\xc6S[\xceS\xa1b \x1d\x14\xfc\x89\xad\xa2\x83V\x93\xb8\vT\x02bS\xcdqE$1\xdbW\x9b<\xc8~\"\x1c\xf5\xa2~\x1e\xd4\'\xf0\xe2\xa4I&RB\xf5\xa5\xc8\x85R\x10\x15\x8d.\xb1_\xedMe!\x9bm\xdd\xd4\xc0E<\"\x8c\a6D6\x13\x10\x02IEWax\xf6C\xa4\xf4#\xa8\xb9\x86\xd210!pcb\xaa\x18\xda\xbb3W\x8b\x9e\xa5Ed9\xdb\xdap\xe5\xf0\xb1\xe7\x14\x00_#\xe1*D1\x92\xb6\xa4\xa0\xe7\a}>nL\xd24\xb3\xb3[\xd3\x7f]4\\\xda\f\x91z\x1c=\x87\x0f\xd2\x89\xf0\x1c\xad\xcf\xd5\x92\x9bc10ZK\x82\xe9\xddb5\xd8\x9e\x8eAO\xbe\xa7,\xa0RG\x96\xc9\x86x\xd1\x85\xee\xaa\xe3\xea\x02\xff\xa7\xf3\xe8\xd8\x11<\x17~r\xaf\x8cx}\xc0%\x06r\xe2', 0x6)
fallocate(r0, 0x0, 0x0, 0x35e)
lseek(r0, 0x0, 0x3)

03:21:47 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
poll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0)

03:21:47 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0xe, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x63, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48)

[ 2451.991721][T30115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2452.026312][T30116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:21:47 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0xe, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x63, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48)

03:21:47 executing program 1:
r0 = memfd_create(&(0x7f0000000140)='\x00\xac=\x9d\xf2\xdb\xe6\xbf\xb4\x91\x1b\x80\x93\x81v\xc5o\xa4k\x012>\xa1\x9c\x86x\x1c\xb3\xd9L\xccc\xecR\xd6\xe8\xf1Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x8c!\xb9ew\xce\xdd8$m\x1d\x8b:\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00Y\x8f\xc6S[\xceS\xa1b \x1d\x14\xfc\x89\xad\xa2\x83V\x93\xb8\vT\x02bS\xcdqE$1\xdbW\x9b<\xc8~\"\x1c\xf5\xa2~\x1e\xd4\'\xf0\xe2\xa4I&RB\xf5\xa5\xc8\x85R\x10\x15\x8d.\xb1_\xedMe!\x9bm\xdd\xd4\xc0E<\"\x8c\a6D6\x13\x10\x02IEWax\xf6C\xa4\xf4#\xa8\xb9\x86\xd210!pcb\xaa\x18\xda\xbb3W\x8b\x9e\xa5Ed9\xdb\xdap\xe5\xf0\xb1\xe7\x14\x00_#\xe1*D1\x92\xb6\xa4\xa0\xe7\a}>nL\xd24\xb3\xb3[\xd3\x7f]4\\\xda\f\x91z\x1c=\x87\x0f\xd2\x89\xf0\x1c\xad\xcf\xd5\x92\x9bc10ZK\x82\xe9\xddb5\xd8\x9e\x8eAO\xbe\xa7,\xa0RG\x96\xc9\x86x\xd1\x85\xee\xaa\xe3\xea\x02\xff\xa7\xf3\xe8\xd8\x11<\x17~r\xaf\x8cx}\xc0%\x06r\xe2', 0x6)
fallocate(r0, 0x0, 0x0, 0x35e)
lseek(r0, 0x0, 0x3)

03:21:47 executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$UHID_INPUT(r0, &(0x7f00000000c0)={0x8, {"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", 0x1000}}, 0x1006)

[ 2452.089720][T30115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2452.126843][T30116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:21:47 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0xe, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x63, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48)

03:21:47 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setresuid(0x0, 0xee00, 0xffffffffffffffff)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0)

[ 2452.188222][T30135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2452.215460][T30116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:21:48 executing program 4:
socket$netlink(0x10, 0x3, 0x0)
r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x7a98}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0)
ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000001cc0)={{}, "0b9ee17cf4f4ea9402aae71b1cc506df5c646b515438b8a5e23f6217fdf5b844fe681f623a977ec42310bb94d85a3c47bbd0538129ff1686a9b259cfb33a2d881ee31824964951b665bee005ef152c7ef74e6e2d95ccea32d7bd623e6b0ad1da63828c6d03c493be5a6d2e6443347f8065a533470ed2564e2859964a77e9a7ba3a0aaec7cac6796b23b5ad2815d54777402332209f581535663c6ee4b543032cfdf72d775086eead8916a62e127e28327631e31112654fa48eaf626ddc9558d9dead2c0590e49d8703bd8c6b58fe315fbde68297557fa7f162f12162310b128ea469b4b68fcde7af194cc5d7a2138aba6b36c21bd1a1f49d7fe4593f1225cd5d5008900f7a3f4cdb9245705f0ea7e78da1230ffd9b013fa27a5898f1c8fd2f08ce49675475e81c969686d81fd7927bcbc890a6ef038eb0254f2c770d1d67275402c1f566b493ac241e0a3a0249661aaff34d8decffcac1562d8b9809bdc0812d593eef3aef9191e23040f569109a9b82da47cd070eaac78bc9f0fb3e8d8368dd8cd6c6138e21106c37c482a58e501ef76dfdf1cf14f869d22b055adc1453d5526320bfff2b24d4ff0cfb54044d0d7580a8d898535296c4ef3afc9245df222af37db09250b8961dd4234a4ec9091e271a2e89a928f97edad97f0f0062ca94c432540068c7194f9d1492773589f6debff9c9aab3c9832ab16c6514b7867168b1133202dd23781d126a72ba083338fd1aec3e9ea3585b31a4e977e51918ee1230252dcbc04a6845b9b063ee2176eacb6f74aed96faf65860d37ece433094105b47d1325006cb69c75a5bb0e0da9df94f1f7264ed4ca82e0e95ec40015a7b4cec4a0dd91c4904472a83773229258f35ec9de9aeaf9a9089e8c6feb9c8585d399caca23aee057f013a4a7b91e919435e0bbd93dda8522881966afce900b0a49f141d2cda0d24d55d59cb3e4889059f2f357a127201d1602efb793597a2ab848818df6e54e0bdf6225ed12179492ddbdc9cae42e875e5a1a7f0f89f8d9f876dedf669e5b52bbcac851940f40bc7de4170e97f02f4b2ee017a03d4b9da81e649c7407f16ffa8dc4dce87955fa1476256206c08bf1e02fe3b35dba9a6e2f46738b372f7aaa24213baddbd8964b69067b49fa25beca977f77d9352d68caafb3f819fe562ae0e49b8a80067aabb6d03d721c67d212cd1cb60fe7f6e95038017f6cb7877c7f98495dd26683208bd91c990670b2fecc6e27f919052c8f3ecef9fab22f86da94a72b91e9ac964eb2bf171392a33bc11ecce4a3470b84bfc9c6c35993dd9bfa6bcd8b67722152dbbcdd5a2915c809736e2b0b900c3de7667ee3257ef96a8c8fda7c6eed2425adb7435d4a766846cbe96a83bc141f6e8335594adb16386b0de7c2522b792e6f13e8e1b4fd33d48b32b4b8027b12c57b495f5e3e5b43666bdfd23581d94a5a04eca04a46f1ad6b7112f5b0ca084ee05ba0d7b4518c5a56478dfa3e3c8430e879d031dee5bcf84f91b3525e03534d1ab988b458a54ccbd10f0d2d79bf325e99c6774abfe0ff39a9d7d8f71fd493ae1fb43172dfbf6e57afdbce7a0415ab3f2f2cfa615b0b4034b76ad273ba1e3ca2b8030a6c9771f2358719a0d72b982f71615fbfdcf22def70e57d9ffa886d16daf66fbacd3b96f221559758b8d444cc515ae481297bd8d36d3928ce9221b9a256e9520ab19fbcf302dee38caa50fff09cd47fe51fdaa1767e7158336b2ac57617f6c2b21ca2dfe2cf490211960d1963130532122bee78db704b1826e7259cd74e0147d5c2b672c0077dc6cc048159d4c9679b17fd44e7cfb4365ac380f9569ef04d4abb7ff9c570aaf5edfe09dafed6e7b00548b2ef49e469171f127229c59ade4b67885929b8dd32d72ff852adb0bf1d156c4e98f4152230e3dfa7fe5cc5ee12763a04c2e868ff63d61edeca671a62588a072e876df43593b9b69c5a6ce4448ef28ce694cf8a51b3c0ef994c1edf3f775093dca0b801786d7f823e5fa2c217a64b978c28a7a2e0e889e3d3c9db00000000fdea65830bd4643dbd6a6b86f0fbdc3850cdd2617c574024c0a54d2b6b1674bc6d72968abc55fa7290e2591877f909a2010f24edd49b28aef732c71355565fc48c1164dcbaf3757384c33062f1bcab1f89f2dcf1b1d16e4de71392b4b004496f532291a0119bd5cf87393a308de9e1064f0196e16965c91ec3e99dfd6744c216fa01ffdd433bd9f1c0d7698c9712f555333aa2fccb5f1cd52507d4c4543fc84d5f4f6a0e26ecb2be09e3b15529c385995fcbadd74f59889cc2b1dd7f3610481762da4e09d9156ad5e8138e956f6842b42adfe3d9f94e8cdb47b1da96f0152c07c3bdc5798c83a1457441f850712c5a31d847354504cc497d8dafb81fd520b16cc2e14c08a6dc89bf62daf39d6e1a28568d70c925f26384400c386e80312f2a0833b228dda1b10faaf7345f6b670dcf78c7d90a077cf2dd1313680df148e95a6861dd0251dc4580a64df2bb3529304dcf7e5a4cfbcedb480ccb3c97742f43168fa0b26db4c41f0a961b7a344b5607ee9c7a04c24e931379b95c318a3a212abe61ec6edc3757e8d621522e1462737f3a85c817a3dfbf1385db0256e482f0aa1828685f291ad73bab35fb0c2c719ba34010222105dccf2e4a788a0e650a29f22b20b05c1094a6048fe35f43ab331e265d93d3e1d31479840a58d3f2ee8c6b561847fcddcf2cbd6366abeeb9daa030cf6193901de77d57bf5ad03dc6efa90f8e41c77f713c4b6835b029258c0c7d0de796eb7185c9b4070ab2a89d2c420dffc7a5308414ddbe5b851c3adc66a453c5c021b67f000000000000004443523eabde5d635468920b7fea726052730ad009ef35f1f58984a432c4ce647917cd273ecb8b4bb9e4de58cf3319067636c3876f0b7c675c7213ea0b0543cb3b69a59f62cbc35b0f118e7fa48d850a9bb54a01342bccbf70105bb0d38096ce54194169b9d344c6972df35dd23486099f32b9d63e9bc9a11a4450dbeb468892488dc1dd75e5129333b4c21778a5fef0b2c53ef3f40bf87a22473d79f96f2353cdfc401278e03c5894d2be17505376cb2f3d7e859f61ac4c829fd99a8bda388bb2c27d2fdff91dc0e3fb2b0e69097d64b4ee1b186c9428a0932c488ba4f1d172db020b428d56fff9c5bf8ea3c972df9bbb2cc2b175417bd01067edd70de76164ecb6fc9569f2c8e574b4410e37cf9ae6403d93c36b060f36abff0196d8c967ff0f0a92dff1ba5cf8d342922b80bb83313f6db43c42672118bb8309d0bb5473253ee5b7f4b69a14af19854fb59b1bb03aff9bd50cad32438b3419190b7282a19972a9a792eb8e932e9d726238f55427e4c10f4f6b9907a3c220e328c2391b41524636a7e919552a695388f915faf6dda40c7cd917e463818d98f602552af15e5a213c00601eb26ce5e8fe7f9562d0917581e15fb491b266057038b17e2bd52f782213bf6f2fb78914acabb9b1d5360f3498df3418d21f0a40e2e9d8fb3cd38207721af9450a97b5d9fda3c1ef9034d430b686362968ebead2db99d40828d4cbb38da9b92d078e8978addf93aa3a73924f1dc6562d64ca8659025c3299cd92a0d7ad2fe6a352acce8fa7e7d516cc88f38d8b1c88a0c788a6cd7d9df69a353264215d817ab404e898a52d98416456d88f4f8be3397cb5d85103779b387e090e1af47e52da81eb0b9598f3c62598f5e4e2f30c7d79b082208089b8221694fcc4b8a0fb8f378d3625525ca7fe3bf8f55221b88809be17f495bd87dc6772051b3ec1190eb21c3ce3a8be909e2775a7e3b0fbfa106c3d348bea72dcf644af5216f89fe68ec34a1988d678fd32639684b3b2dfcfabdbeafe0af959a459fc86a4f85ec957c259bda9fde5b33df4a40050a03bc334cdb10eed500312d7203b1dba5fb387a12df799ae0aa5437ea49ab0245c9e9ffaf00b2e598fb4db0b1787791f8573ff45129af63527828a69542e6a9ca34af654c6c94852387a4d61bbf07379079dfbcf90975e15f7c6816b8d0b41c00d15cd1f4e1f32eff67fb8a80d1a6f4e4bb73c7b068878a36f7dbdc6b7b8aa6f4ea3f45a3111164587fb414022a15dfe625de3f2fe9f5c6a6bde1954cb4a4d975080f5f70eafcc7af5583e0de0b0cff74c6978609e40fe75b10945d70c2b1c0e20cb78c1b5e3bfca6e2734f3aab732e72984496ea4b7fe29c31f180f4f587ca5a63ddc61f6dd2fe4212b9899e05a25cf9ff404260552c503543563ac2c5212809bd503d6d49b71a20d7f724b33f7f92a42ff96e570cd112c9fbde8fad69fd07f8bf02809828dab2b6170aab3b75618dbfa8b17c10eaf7b5e1118c887b7d0384f5694a7972546b3c95531c26c522c29a76f2552686fbf0e52eaed534a047ddf03aedbceb156c7c0c700e1985c0461146994d8c85ac8084d3a7e7ff76587a0c5aac2de065a425db5dd6ef5d6c022ea527702ee7ba28a17b569f2568ae927f8b8298656ea6f0e864024f311ac96f1c2e583cab4a253788864d0628dfd6ba6221525cfdbb90443d8bcb34d020cbc7345aa251c3abff7138f64aad503bf27bad05027cc0b7756eb1d67814a43a8d03166ed79695fded7f12e6b660a748840981c521b22c0ad8d2fc369ba9911bd3f139e572dbe5def1188f1d7544bcc101172a99eddda3ef9a751ae029c16129ade3f85f2e6782bd7b6cdcda73301da6edc174ddacb8dd95ac29df8ae86576abd21833e7531ad1feb6af0e2f0b1ae086fb711537cc9e2335a1f197dac5f55fcc5748522383eb6367dfca8ef75cb6c44603df6b586700834d3b866f761dcee598b0fed00c0421dc12418f43892dc60f85f2bee8c86f5c1f843416bd26aede440b746d99b71bfc782257a066d9c37eb747d39a23282f39998d3f173ab785a501b350b86167161dc0c56bf8cbc7b2c310bc8c4751db5f8c91195f1092ad5eca51644e2c917ceb384b0fe76f54888d35f6398741b7ffd3df95f56ec87bda861be488268f067149e849a214bcd2e391bc3dee8ca6b2fad77f8371ea4f447bb467b7fbfbac9a491c76124ac9d5e50d8c5bb2f21e936bb2a9924548ccd94fdb1c95f9a734f363d1d79c092ff601462fc02bbba16e97496be1106b0f6c0056185fd312153a2ae0a7dbfc87918cbed2ba94c1c3ef79b1456a1c32fde3fff8a541ad63c16f817930f9080fc1ff6e268e15572f5b7e042e0264f16dfc558495ea801e80e2265b1571833f51b1461b201792555db378bbcc3b99e209b96337b41c7349d1983d1829bb79c17cb61f29cf9c1e5f6da4880bcac4cc0333fe266981c419ae92108cbeaaec794b7e645b31f09be93c84230006cda824055096f1f0cfc356c7be40bfa89360103c7f29cb3cf74ec8e0beebcb4288b068de4793d9f65238ae2861dcf9b5c0f1555c9b2b82f323459f290493ba7798b19cc5dd3d97a98bbc6d122096400534f243494f8022c7dfb0064bc3de7da0c6c89583f3a6d1f2f247e1c961479fa2a88cbc47d6ef5c17fb1ddb6d0c94132c64c4de858fdc2206a7af0c7bf5eb61c3620063d19ef06950dcc32881cb1aaf30f656ddb1e5a57e194db1767addcb3d964805657fd36ca2f492c4e5ab0f07dd97605d4e2162875337a2fadd97a51a0ac11defbf755561892dc6ab792a0e179c1c8372127a44b9f1a59945a9ed44f66576ebd6c96ddf563fb5bd1af1efae28033ba7734bc56b02a871ef174ac7709fa76da074c4108d72fe92579996d57f062459dbcb9f49c6000"})
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x14)

03:21:48 executing program 1:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000))

03:21:48 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setresuid(0x0, 0xee00, 0xffffffffffffffff)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0)

03:21:48 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {0x300}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:21:48 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getpid()
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x1)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
clock_gettime(0x0, &(0x7f00000015c0))
writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r5 = memfd_create(&(0x7f0000000100)='\x06\xf8\x84{\xa8\xb0C\x06\x8b\x8c\x99r\x1b\x13\x10y\x9b\xecd%\xe5*\b\xf1\xa2y\xe9\x8a\xd5\x14\x8auD\x86\xf0\x9c\xb1\xb2B\xc2\xed\x02Q\xe41*\x03a\xb9\x9c\x183\x98\xa6dMZe\x85s\x0fE\xbbf\xc7\xf7)\x92@\xc5\xb3D\xc1\xea\x1e3\xcf\x1a\xb5F\xe0\xed\xeai\xc1\xd1%\xf7\xd3\v\xc6\xc5V@\xbe\x85\xa3\b\xff\x98N\x92:\xfdRU\xe4\x86I7\xdf\xf6\x9e\x8f\x00\x00\x00\x00\x00\x00\x00\x00\x00!%\xa6q4\xa5 m\xc8\xc8\x85\xd3\xdf)\xfd\xaf+\xc2/K\x0e\xd4\xdf\x1e\x15h\xd2<\a\x12\bt8M\xc6\x93\x1d\x82\xb5\x1f\xcd\x93d', 0x0)
fstat(r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
r7 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/binder-control\x00', 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240)=[{{&(0x7f00000001c0)=@file={0x0, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000400)="7aba53607e01f028e8d5f64617bf5349dc96733064203653a45909ef346412442691823da16cf64e99882a940aba63ae8fb74f57fee2af72eaef31d4eadf7eb296204f588ec2163472ecbe83db77f4335dc9a3359113693d785b43fa", 0x5c}, {&(0x7f0000000480)="8e02167c030000002324023bcb4b1f0b6c14bfdfa9cba61eab10e02af4a64b7443005bff0f8fa82910c3270db734b7ee42a10c8f9bf550903b87e073757825b2cc70b59eb86efc27b58a65cad6b83e8960e86a671e7e2ab8b48e8a7f55da6245286a9ded48d83cf40dbfb820fe5c8af23cb959237e359f6a6458d63fc8f52f836fa283f31c983070976b5f7afd51", 0x8e}], 0x2, &(0x7f0000000c00)=ANY=[@ANYBLOB="1c08000000000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00$\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x48, 0x840}}], 0x1, 0x404c000)
openat$incfs(r3, &(0x7f0000001680)='.pending_reads\x00', 0x80000, 0x180)
openat$ppp(0xffffffffffffff9c, &(0x7f00000016c0), 0x410400, 0x0)
mount$overlay(0x0, &(0x7f0000000900)='./file0\x00', &(0x7f0000000ac0), 0x10000, &(0x7f0000000940)=ANY=[@ANYBLOB='redirect_dir=./file0,xino=auto,metacopy=off,xino=on,nfs_export=off,default_permissions,workdir=./file0,fowner<', @ANYRESDEC=0x0, @ANYBLOB=',euid=', @ANYRESDEC=0x0, @ANYBLOB=',smackfsfloor=,audit,obj_user=cgroup2\x00,smackfstransmute=)}#,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c0086f3b54ff9847f26cca9f8541a96d4ef8dc44a94bd695f69b08bb9855c182c35b321b77da72983eb5f20380b475f7300"/65])
r8 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r8, 0x6611, 0x0)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000180)={0xffffffff00000000, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x7, 0xfd, 0x2, 0x4, 0x0, 0xe00, 0x0, [@sadb_ident={0x2, 0xa, 0x1f, 0x0, 0x7e}]}, 0x20}}, 0x0)

03:21:48 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x5000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:21:48 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setresuid(0x0, 0xee00, 0xffffffffffffffff)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0)

03:21:48 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setresuid(0x0, 0xee00, 0xffffffffffffffff)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0)

03:21:48 executing program 1:
socket$netlink(0x10, 0x3, 0x0)
r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x7a98}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0)
ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000001cc0)={{}, "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"})
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x14)

[ 2452.988133][T30150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2453.001221][T30147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2453.102961][T30156] overlayfs: unrecognized mount option "fowner<00000000000000000000" or missing value
[ 2453.156013][T30147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2453.236220][T30150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2453.655571][T30150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2453.838897][T30147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:21:49 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x7a98}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0)
ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000001cc0)={{}, "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"})
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x14)

03:21:49 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {0x500}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:21:49 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getpid()
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x1)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
clock_gettime(0x0, &(0x7f00000015c0))
writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r5 = memfd_create(&(0x7f0000000100)='\x06\xf8\x84{\xa8\xb0C\x06\x8b\x8c\x99r\x1b\x13\x10y\x9b\xecd%\xe5*\b\xf1\xa2y\xe9\x8a\xd5\x14\x8auD\x86\xf0\x9c\xb1\xb2B\xc2\xed\x02Q\xe41*\x03a\xb9\x9c\x183\x98\xa6dMZe\x85s\x0fE\xbbf\xc7\xf7)\x92@\xc5\xb3D\xc1\xea\x1e3\xcf\x1a\xb5F\xe0\xed\xeai\xc1\xd1%\xf7\xd3\v\xc6\xc5V@\xbe\x85\xa3\b\xff\x98N\x92:\xfdRU\xe4\x86I7\xdf\xf6\x9e\x8f\x00\x00\x00\x00\x00\x00\x00\x00\x00!%\xa6q4\xa5 m\xc8\xc8\x85\xd3\xdf)\xfd\xaf+\xc2/K\x0e\xd4\xdf\x1e\x15h\xd2<\a\x12\bt8M\xc6\x93\x1d\x82\xb5\x1f\xcd\x93d', 0x0)
fstat(r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
r7 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/binder-control\x00', 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240)=[{{&(0x7f00000001c0)=@file={0x0, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000400)="7aba53607e01f028e8d5f64617bf5349dc96733064203653a45909ef346412442691823da16cf64e99882a940aba63ae8fb74f57fee2af72eaef31d4eadf7eb296204f588ec2163472ecbe83db77f4335dc9a3359113693d785b43fa", 0x5c}, {&(0x7f0000000480)="8e02167c030000002324023bcb4b1f0b6c14bfdfa9cba61eab10e02af4a64b7443005bff0f8fa82910c3270db734b7ee42a10c8f9bf550903b87e073757825b2cc70b59eb86efc27b58a65cad6b83e8960e86a671e7e2ab8b48e8a7f55da6245286a9ded48d83cf40dbfb820fe5c8af23cb959237e359f6a6458d63fc8f52f836fa283f31c983070976b5f7afd51", 0x8e}], 0x2, &(0x7f0000000c00)=ANY=[@ANYBLOB="1c08000000000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00$\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x48, 0x840}}], 0x1, 0x404c000)
openat$incfs(r3, &(0x7f0000001680)='.pending_reads\x00', 0x80000, 0x180)
openat$ppp(0xffffffffffffff9c, &(0x7f00000016c0), 0x410400, 0x0)
mount$overlay(0x0, &(0x7f0000000900)='./file0\x00', &(0x7f0000000ac0), 0x10000, &(0x7f0000000940)=ANY=[@ANYBLOB='redirect_dir=./file0,xino=auto,metacopy=off,xino=on,nfs_export=off,default_permissions,workdir=./file0,fowner<', @ANYRESDEC=0x0, @ANYBLOB=',euid=', @ANYRESDEC=0x0, @ANYBLOB=',smackfsfloor=,audit,obj_user=cgroup2\x00,smackfstransmute=)}#,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c0086f3b54ff9847f26cca9f8541a96d4ef8dc44a94bd695f69b08bb9855c182c35b321b77da72983eb5f20380b475f7300"/65])
r8 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r8, 0x6611, 0x0)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000180)={0xffffffff00000000, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x7, 0xfd, 0x2, 0x4, 0x0, 0xe00, 0x0, [@sadb_ident={0x2, 0xa, 0x1f, 0x0, 0x7e}]}, 0x20}}, 0x0)

03:21:50 executing program 4:
socket$netlink(0x10, 0x3, 0x0)
r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x7a98}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0)
ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000001cc0)={{}, "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"})
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x14)

[ 2454.796799][T30233] overlayfs: unrecognized mount option "fowner<00000000000000000000" or missing value
03:21:51 executing program 1:
socket$netlink(0x10, 0x3, 0x0)
r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x7a98}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0)
ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000001cc0)={{}, "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"})
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x14)

[ 2455.762753][T30263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:21:51 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getpid()
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x1)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
clock_gettime(0x0, &(0x7f00000015c0))
writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r5 = memfd_create(&(0x7f0000000100)='\x06\xf8\x84{\xa8\xb0C\x06\x8b\x8c\x99r\x1b\x13\x10y\x9b\xecd%\xe5*\b\xf1\xa2y\xe9\x8a\xd5\x14\x8auD\x86\xf0\x9c\xb1\xb2B\xc2\xed\x02Q\xe41*\x03a\xb9\x9c\x183\x98\xa6dMZe\x85s\x0fE\xbbf\xc7\xf7)\x92@\xc5\xb3D\xc1\xea\x1e3\xcf\x1a\xb5F\xe0\xed\xeai\xc1\xd1%\xf7\xd3\v\xc6\xc5V@\xbe\x85\xa3\b\xff\x98N\x92:\xfdRU\xe4\x86I7\xdf\xf6\x9e\x8f\x00\x00\x00\x00\x00\x00\x00\x00\x00!%\xa6q4\xa5 m\xc8\xc8\x85\xd3\xdf)\xfd\xaf+\xc2/K\x0e\xd4\xdf\x1e\x15h\xd2<\a\x12\bt8M\xc6\x93\x1d\x82\xb5\x1f\xcd\x93d', 0x0)
fstat(r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
r7 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/binder-control\x00', 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240)=[{{&(0x7f00000001c0)=@file={0x0, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000400)="7aba53607e01f028e8d5f64617bf5349dc96733064203653a45909ef346412442691823da16cf64e99882a940aba63ae8fb74f57fee2af72eaef31d4eadf7eb296204f588ec2163472ecbe83db77f4335dc9a3359113693d785b43fa", 0x5c}, {&(0x7f0000000480)="8e02167c030000002324023bcb4b1f0b6c14bfdfa9cba61eab10e02af4a64b7443005bff0f8fa82910c3270db734b7ee42a10c8f9bf550903b87e073757825b2cc70b59eb86efc27b58a65cad6b83e8960e86a671e7e2ab8b48e8a7f55da6245286a9ded48d83cf40dbfb820fe5c8af23cb959237e359f6a6458d63fc8f52f836fa283f31c983070976b5f7afd51", 0x8e}], 0x2, &(0x7f0000000c00)=ANY=[@ANYBLOB="1c08000000000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00$\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x48, 0x840}}], 0x1, 0x404c000)
openat$incfs(r3, &(0x7f0000001680)='.pending_reads\x00', 0x80000, 0x180)
openat$ppp(0xffffffffffffff9c, &(0x7f00000016c0), 0x410400, 0x0)
mount$overlay(0x0, &(0x7f0000000900)='./file0\x00', &(0x7f0000000ac0), 0x10000, &(0x7f0000000940)=ANY=[@ANYBLOB='redirect_dir=./file0,xino=auto,metacopy=off,xino=on,nfs_export=off,default_permissions,workdir=./file0,fowner<', @ANYRESDEC=0x0, @ANYBLOB=',euid=', @ANYRESDEC=0x0, @ANYBLOB=',smackfsfloor=,audit,obj_user=cgroup2\x00,smackfstransmute=)}#,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c0086f3b54ff9847f26cca9f8541a96d4ef8dc44a94bd695f69b08bb9855c182c35b321b77da72983eb5f20380b475f7300"/65])
r8 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r8, 0x6611, 0x0)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000180)={0xffffffff00000000, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x7, 0xfd, 0x2, 0x4, 0x0, 0xe00, 0x0, [@sadb_ident={0x2, 0xa, 0x1f, 0x0, 0x7e}]}, 0x20}}, 0x0)

[ 2456.290717][T30263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2456.644339][T30263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:21:52 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x7a98}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0)
ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000001cc0)={{}, "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"})
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x14)

[ 2456.793637][T30321] overlayfs: unrecognized mount option "fowner<00000000000000000000" or missing value
03:21:53 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getpid()
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x1)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
clock_gettime(0x0, &(0x7f00000015c0))
writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
r5 = memfd_create(&(0x7f0000000100)='\x06\xf8\x84{\xa8\xb0C\x06\x8b\x8c\x99r\x1b\x13\x10y\x9b\xecd%\xe5*\b\xf1\xa2y\xe9\x8a\xd5\x14\x8auD\x86\xf0\x9c\xb1\xb2B\xc2\xed\x02Q\xe41*\x03a\xb9\x9c\x183\x98\xa6dMZe\x85s\x0fE\xbbf\xc7\xf7)\x92@\xc5\xb3D\xc1\xea\x1e3\xcf\x1a\xb5F\xe0\xed\xeai\xc1\xd1%\xf7\xd3\v\xc6\xc5V@\xbe\x85\xa3\b\xff\x98N\x92:\xfdRU\xe4\x86I7\xdf\xf6\x9e\x8f\x00\x00\x00\x00\x00\x00\x00\x00\x00!%\xa6q4\xa5 m\xc8\xc8\x85\xd3\xdf)\xfd\xaf+\xc2/K\x0e\xd4\xdf\x1e\x15h\xd2<\a\x12\bt8M\xc6\x93\x1d\x82\xb5\x1f\xcd\x93d', 0x0)
fstat(r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
r7 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/binder-control\x00', 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240)=[{{&(0x7f00000001c0)=@file={0x0, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000400)="7aba53607e01f028e8d5f64617bf5349dc96733064203653a45909ef346412442691823da16cf64e99882a940aba63ae8fb74f57fee2af72eaef31d4eadf7eb296204f588ec2163472ecbe83db77f4335dc9a3359113693d785b43fa", 0x5c}, {&(0x7f0000000480)="8e02167c030000002324023bcb4b1f0b6c14bfdfa9cba61eab10e02af4a64b7443005bff0f8fa82910c3270db734b7ee42a10c8f9bf550903b87e073757825b2cc70b59eb86efc27b58a65cad6b83e8960e86a671e7e2ab8b48e8a7f55da6245286a9ded48d83cf40dbfb820fe5c8af23cb959237e359f6a6458d63fc8f52f836fa283f31c983070976b5f7afd51", 0x8e}], 0x2, &(0x7f0000000c00)=ANY=[@ANYBLOB="1c08000000000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00$\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x48, 0x840}}], 0x1, 0x404c000)
openat$incfs(r3, &(0x7f0000001680)='.pending_reads\x00', 0x80000, 0x180)
openat$ppp(0xffffffffffffff9c, &(0x7f00000016c0), 0x410400, 0x0)
mount$overlay(0x0, &(0x7f0000000900)='./file0\x00', &(0x7f0000000ac0), 0x10000, &(0x7f0000000940)=ANY=[@ANYBLOB='redirect_dir=./file0,xino=auto,metacopy=off,xino=on,nfs_export=off,default_permissions,workdir=./file0,fowner<', @ANYRESDEC=0x0, @ANYBLOB=',euid=', @ANYRESDEC=0x0, @ANYBLOB=',smackfsfloor=,audit,obj_user=cgroup2\x00,smackfstransmute=)}#,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c0086f3b54ff9847f26cca9f8541a96d4ef8dc44a94bd695f69b08bb9855c182c35b321b77da72983eb5f20380b475f7300"/65])
r8 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r8, 0x6611, 0x0)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000180)={0xffffffff00000000, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x7, 0xfd, 0x2, 0x4, 0x0, 0xe00, 0x0, [@sadb_ident={0x2, 0xa, 0x1f, 0x0, 0x7e}]}, 0x20}}, 0x0)

[ 2459.001753][T30404] overlayfs: unrecognized mount option "fowner<00000000000000000000" or missing value
[ 2461.467810][    T6] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2461.746446][    T6] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2461.849792][    T6] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2461.927116][    T6] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2462.805248][    T6] device hsr_slave_0 left promiscuous mode
[ 2462.812050][    T6] device hsr_slave_1 left promiscuous mode
[ 2462.819542][    T6] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2462.828508][    T6] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2462.840762][    T6] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2462.848291][    T6] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2462.858393][    T6] device bridge_slave_1 left promiscuous mode
[ 2462.864795][    T6] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2462.875142][    T6] device bridge_slave_0 left promiscuous mode
[ 2462.881441][    T6] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2462.899156][    T6] device veth1_macvtap left promiscuous mode
[ 2462.905538][    T6] device veth0_macvtap left promiscuous mode
[ 2462.911685][    T6] device veth1_vlan left promiscuous mode
[ 2462.922292][    T6] device veth0_vlan left promiscuous mode
[ 2463.182103][    T6] team0 (unregistering): Port device team_slave_1 removed
[ 2463.200147][    T6] team0 (unregistering): Port device team_slave_0 removed
[ 2463.215580][    T6] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2463.232020][    T6] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2463.334783][    T6] bond0 (unregistering): Released all slaves
[ 2464.210750][T21395] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2464.221626][T21395] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2464.231497][T21395] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2464.239419][T21395] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 2464.247173][T21395] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2464.631708][T30500] chnl_net:caif_netlink_parms(): no params data found
[ 2464.891211][T30500] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2464.921812][T30500] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2464.948330][T30500] device bridge_slave_0 entered promiscuous mode
[ 2464.982903][T30500] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2465.006920][T30500] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2465.038933][T30500] device bridge_slave_1 entered promiscuous mode
[ 2465.126333][T30500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2465.162748][T30500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2465.221796][T30500] team0: Port device team_slave_0 added
[ 2465.234806][T30500] team0: Port device team_slave_1 added
[ 2465.294948][T30500] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2465.302596][T30500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2465.330852][T30500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2465.345560][T30500] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2465.352995][T30500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2465.381602][T30500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2465.447179][T30500] device hsr_slave_0 entered promiscuous mode
[ 2465.455526][T30500] device hsr_slave_1 entered promiscuous mode
[ 2465.463484][T30500] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2465.471703][T30500] Cannot create hsr debugfs directory
[ 2466.334498][ T3580] Bluetooth: hci4: command 0x0409 tx timeout
[ 2466.379555][T30500] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2466.399371][T30500] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2466.421946][T30500] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2466.439506][T30500] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2466.595627][T30500] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2466.621209][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2466.637138][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2466.653914][T30500] 8021q: adding VLAN 0 to HW filter on device team0
[ 2466.681217][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2466.698180][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2466.711235][T29724] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2466.718435][T29724] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2466.756275][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2466.772740][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2466.782002][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2466.798003][T21994] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2466.805203][T21994] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2466.813355][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2466.822899][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2466.854998][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2466.872681][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2466.882398][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2466.902087][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2466.919487][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2466.930783][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2466.949812][T30500] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2466.967040][T30500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2466.983188][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2466.992273][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2467.009851][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2467.337776][T19423] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2467.356440][T19423] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2467.384102][T30500] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2467.450554][T19423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2467.476882][T19423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2467.545963][T19423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2467.566864][T19423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2467.581174][T30500] device veth0_vlan entered promiscuous mode
[ 2467.590163][T19423] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2467.600113][T19423] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2467.620303][T30500] device veth1_vlan entered promiscuous mode
[ 2467.682837][T19423] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2467.704956][T19423] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2467.724754][T19423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2467.743262][T19423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2467.770057][T30500] device veth0_macvtap entered promiscuous mode
[ 2467.810147][T30500] device veth1_macvtap entered promiscuous mode
[ 2467.872289][T30500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2467.895082][T30500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2467.916272][T30500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2467.943925][T30500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2467.964306][T30500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2467.985088][T30500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2468.008872][T30500] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2468.028863][T19423] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2468.044771][T19423] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2468.064101][T19423] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2468.074649][T19423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2468.096541][T30500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2468.108399][T30500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2468.121381][T30500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2468.133316][T30500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2468.144471][T30500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2468.156537][T30500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2468.170031][T30500] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2468.181726][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2468.192565][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2468.209452][T30500] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2468.220597][T30500] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2468.230521][T30500] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2468.241792][T30500] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2468.355755][T30407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2468.379803][T30407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2468.409694][T30460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2468.415325][T22270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2468.418203][ T3580] Bluetooth: hci4: command 0x041b tx timeout
[ 2468.441001][T30460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2468.455977][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2468.548652][T30581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2468.591929][T22270] wlan1: authenticate with 08:02:11:00:00:00
[ 2468.610821][T30581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2468.615635][T22270] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2468.689491][T30581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2468.744418][T30446] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[ 2468.864496][T30446] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[ 2468.984418][T30446] wlan1: authentication with 08:02:11:00:00:00 timed out
03:22:04 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x6000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:22:04 executing program 1:
socket$netlink(0x10, 0x3, 0x0)
r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x7a98}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0)
ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000001cc0)={{}, "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"})
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x14)

03:22:04 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x7a98}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0)
ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000001cc0)={{}, "0b9ee17cf4f4ea9402aae71b1cc506df5c646b515438b8a5e23f6217fdf5b844fe681f623a977ec42310bb94d85a3c47bbd0538129ff1686a9b259cfb33a2d881ee31824964951b665bee005ef152c7ef74e6e2d95ccea32d7bd623e6b0ad1da63828c6d03c493be5a6d2e6443347f8065a533470ed2564e2859964a77e9a7ba3a0aaec7cac6796b23b5ad2815d54777402332209f581535663c6ee4b543032cfdf72d775086eead8916a62e127e28327631e31112654fa48eaf626ddc9558d9dead2c0590e49d8703bd8c6b58fe315fbde68297557fa7f162f12162310b128ea469b4b68fcde7af194cc5d7a2138aba6b36c21bd1a1f49d7fe4593f1225cd5d5008900f7a3f4cdb9245705f0ea7e78da1230ffd9b013fa27a5898f1c8fd2f08ce49675475e81c969686d81fd7927bcbc890a6ef038eb0254f2c770d1d67275402c1f566b493ac241e0a3a0249661aaff34d8decffcac1562d8b9809bdc0812d593eef3aef9191e23040f569109a9b82da47cd070eaac78bc9f0fb3e8d8368dd8cd6c6138e21106c37c482a58e501ef76dfdf1cf14f869d22b055adc1453d5526320bfff2b24d4ff0cfb54044d0d7580a8d898535296c4ef3afc9245df222af37db09250b8961dd4234a4ec9091e271a2e89a928f97edad97f0f0062ca94c432540068c7194f9d1492773589f6debff9c9aab3c9832ab16c6514b7867168b1133202dd23781d126a72ba083338fd1aec3e9ea3585b31a4e977e51918ee1230252dcbc04a6845b9b063ee2176eacb6f74aed96faf65860d37ece433094105b47d1325006cb69c75a5bb0e0da9df94f1f7264ed4ca82e0e95ec40015a7b4cec4a0dd91c4904472a83773229258f35ec9de9aeaf9a9089e8c6feb9c8585d399caca23aee057f013a4a7b91e919435e0bbd93dda8522881966afce900b0a49f141d2cda0d24d55d59cb3e4889059f2f357a127201d1602efb793597a2ab848818df6e54e0bdf6225ed12179492ddbdc9cae42e875e5a1a7f0f89f8d9f876dedf669e5b52bbcac851940f40bc7de4170e97f02f4b2ee017a03d4b9da81e649c7407f16ffa8dc4dce87955fa1476256206c08bf1e02fe3b35dba9a6e2f46738b372f7aaa24213baddbd8964b69067b49fa25beca977f77d9352d68caafb3f819fe562ae0e49b8a80067aabb6d03d721c67d212cd1cb60fe7f6e95038017f6cb7877c7f98495dd26683208bd91c990670b2fecc6e27f919052c8f3ecef9fab22f86da94a72b91e9ac964eb2bf171392a33bc11ecce4a3470b84bfc9c6c35993dd9bfa6bcd8b67722152dbbcdd5a2915c809736e2b0b900c3de7667ee3257ef96a8c8fda7c6eed2425adb7435d4a766846cbe96a83bc141f6e8335594adb16386b0de7c2522b792e6f13e8e1b4fd33d48b32b4b8027b12c57b495f5e3e5b43666bdfd23581d94a5a04eca04a46f1ad6b7112f5b0ca084ee05ba0d7b4518c5a56478dfa3e3c8430e879d031dee5bcf84f91b3525e03534d1ab988b458a54ccbd10f0d2d79bf325e99c6774abfe0ff39a9d7d8f71fd493ae1fb43172dfbf6e57afdbce7a0415ab3f2f2cfa615b0b4034b76ad273ba1e3ca2b8030a6c9771f2358719a0d72b982f71615fbfdcf22def70e57d9ffa886d16daf66fbacd3b96f221559758b8d444cc515ae481297bd8d36d3928ce9221b9a256e9520ab19fbcf302dee38caa50fff09cd47fe51fdaa1767e7158336b2ac57617f6c2b21ca2dfe2cf490211960d1963130532122bee78db704b1826e7259cd74e0147d5c2b672c0077dc6cc048159d4c9679b17fd44e7cfb4365ac380f9569ef04d4abb7ff9c570aaf5edfe09dafed6e7b00548b2ef49e469171f127229c59ade4b67885929b8dd32d72ff852adb0bf1d156c4e98f4152230e3dfa7fe5cc5ee12763a04c2e868ff63d61edeca671a62588a072e876df43593b9b69c5a6ce4448ef28ce694cf8a51b3c0ef994c1edf3f775093dca0b801786d7f823e5fa2c217a64b978c28a7a2e0e889e3d3c9db00000000fdea65830bd4643dbd6a6b86f0fbdc3850cdd2617c574024c0a54d2b6b1674bc6d72968abc55fa7290e2591877f909a2010f24edd49b28aef732c71355565fc48c1164dcbaf3757384c33062f1bcab1f89f2dcf1b1d16e4de71392b4b004496f532291a0119bd5cf87393a308de9e1064f0196e16965c91ec3e99dfd6744c216fa01ffdd433bd9f1c0d7698c9712f555333aa2fccb5f1cd52507d4c4543fc84d5f4f6a0e26ecb2be09e3b15529c385995fcbadd74f59889cc2b1dd7f3610481762da4e09d9156ad5e8138e956f6842b42adfe3d9f94e8cdb47b1da96f0152c07c3bdc5798c83a1457441f850712c5a31d847354504cc497d8dafb81fd520b16cc2e14c08a6dc89bf62daf39d6e1a28568d70c925f26384400c386e80312f2a0833b228dda1b10faaf7345f6b670dcf78c7d90a077cf2dd1313680df148e95a6861dd0251dc4580a64df2bb3529304dcf7e5a4cfbcedb480ccb3c97742f43168fa0b26db4c41f0a961b7a344b5607ee9c7a04c24e931379b95c318a3a212abe61ec6edc3757e8d621522e1462737f3a85c817a3dfbf1385db0256e482f0aa1828685f291ad73bab35fb0c2c719ba34010222105dccf2e4a788a0e650a29f22b20b05c1094a6048fe35f43ab331e265d93d3e1d31479840a58d3f2ee8c6b561847fcddcf2cbd6366abeeb9daa030cf6193901de77d57bf5ad03dc6efa90f8e41c77f713c4b6835b029258c0c7d0de796eb7185c9b4070ab2a89d2c420dffc7a5308414ddbe5b851c3adc66a453c5c021b67f000000000000004443523eabde5d635468920b7fea726052730ad009ef35f1f58984a432c4ce647917cd273ecb8b4bb9e4de58cf3319067636c3876f0b7c675c7213ea0b0543cb3b69a59f62cbc35b0f118e7fa48d850a9bb54a01342bccbf70105bb0d38096ce54194169b9d344c6972df35dd23486099f32b9d63e9bc9a11a4450dbeb468892488dc1dd75e5129333b4c21778a5fef0b2c53ef3f40bf87a22473d79f96f2353cdfc401278e03c5894d2be17505376cb2f3d7e859f61ac4c829fd99a8bda388bb2c27d2fdff91dc0e3fb2b0e69097d64b4ee1b186c9428a0932c488ba4f1d172db020b428d56fff9c5bf8ea3c972df9bbb2cc2b175417bd01067edd70de76164ecb6fc9569f2c8e574b4410e37cf9ae6403d93c36b060f36abff0196d8c967ff0f0a92dff1ba5cf8d342922b80bb83313f6db43c42672118bb8309d0bb5473253ee5b7f4b69a14af19854fb59b1bb03aff9bd50cad32438b3419190b7282a19972a9a792eb8e932e9d726238f55427e4c10f4f6b9907a3c220e328c2391b41524636a7e919552a695388f915faf6dda40c7cd917e463818d98f602552af15e5a213c00601eb26ce5e8fe7f9562d0917581e15fb491b266057038b17e2bd52f782213bf6f2fb78914acabb9b1d5360f3498df3418d21f0a40e2e9d8fb3cd38207721af9450a97b5d9fda3c1ef9034d430b686362968ebead2db99d40828d4cbb38da9b92d078e8978addf93aa3a73924f1dc6562d64ca8659025c3299cd92a0d7ad2fe6a352acce8fa7e7d516cc88f38d8b1c88a0c788a6cd7d9df69a353264215d817ab404e898a52d98416456d88f4f8be3397cb5d85103779b387e090e1af47e52da81eb0b9598f3c62598f5e4e2f30c7d79b082208089b8221694fcc4b8a0fb8f378d3625525ca7fe3bf8f55221b88809be17f495bd87dc6772051b3ec1190eb21c3ce3a8be909e2775a7e3b0fbfa106c3d348bea72dcf644af5216f89fe68ec34a1988d678fd32639684b3b2dfcfabdbeafe0af959a459fc86a4f85ec957c259bda9fde5b33df4a40050a03bc334cdb10eed500312d7203b1dba5fb387a12df799ae0aa5437ea49ab0245c9e9ffaf00b2e598fb4db0b1787791f8573ff45129af63527828a69542e6a9ca34af654c6c94852387a4d61bbf07379079dfbcf90975e15f7c6816b8d0b41c00d15cd1f4e1f32eff67fb8a80d1a6f4e4bb73c7b068878a36f7dbdc6b7b8aa6f4ea3f45a3111164587fb414022a15dfe625de3f2fe9f5c6a6bde1954cb4a4d975080f5f70eafcc7af5583e0de0b0cff74c6978609e40fe75b10945d70c2b1c0e20cb78c1b5e3bfca6e2734f3aab732e72984496ea4b7fe29c31f180f4f587ca5a63ddc61f6dd2fe4212b9899e05a25cf9ff404260552c503543563ac2c5212809bd503d6d49b71a20d7f724b33f7f92a42ff96e570cd112c9fbde8fad69fd07f8bf02809828dab2b6170aab3b75618dbfa8b17c10eaf7b5e1118c887b7d0384f5694a7972546b3c95531c26c522c29a76f2552686fbf0e52eaed534a047ddf03aedbceb156c7c0c700e1985c0461146994d8c85ac8084d3a7e7ff76587a0c5aac2de065a425db5dd6ef5d6c022ea527702ee7ba28a17b569f2568ae927f8b8298656ea6f0e864024f311ac96f1c2e583cab4a253788864d0628dfd6ba6221525cfdbb90443d8bcb34d020cbc7345aa251c3abff7138f64aad503bf27bad05027cc0b7756eb1d67814a43a8d03166ed79695fded7f12e6b660a748840981c521b22c0ad8d2fc369ba9911bd3f139e572dbe5def1188f1d7544bcc101172a99eddda3ef9a751ae029c16129ade3f85f2e6782bd7b6cdcda73301da6edc174ddacb8dd95ac29df8ae86576abd21833e7531ad1feb6af0e2f0b1ae086fb711537cc9e2335a1f197dac5f55fcc5748522383eb6367dfca8ef75cb6c44603df6b586700834d3b866f761dcee598b0fed00c0421dc12418f43892dc60f85f2bee8c86f5c1f843416bd26aede440b746d99b71bfc782257a066d9c37eb747d39a23282f39998d3f173ab785a501b350b86167161dc0c56bf8cbc7b2c310bc8c4751db5f8c91195f1092ad5eca51644e2c917ceb384b0fe76f54888d35f6398741b7ffd3df95f56ec87bda861be488268f067149e849a214bcd2e391bc3dee8ca6b2fad77f8371ea4f447bb467b7fbfbac9a491c76124ac9d5e50d8c5bb2f21e936bb2a9924548ccd94fdb1c95f9a734f363d1d79c092ff601462fc02bbba16e97496be1106b0f6c0056185fd312153a2ae0a7dbfc87918cbed2ba94c1c3ef79b1456a1c32fde3fff8a541ad63c16f817930f9080fc1ff6e268e15572f5b7e042e0264f16dfc558495ea801e80e2265b1571833f51b1461b201792555db378bbcc3b99e209b96337b41c7349d1983d1829bb79c17cb61f29cf9c1e5f6da4880bcac4cc0333fe266981c419ae92108cbeaaec794b7e645b31f09be93c84230006cda824055096f1f0cfc356c7be40bfa89360103c7f29cb3cf74ec8e0beebcb4288b068de4793d9f65238ae2861dcf9b5c0f1555c9b2b82f323459f290493ba7798b19cc5dd3d97a98bbc6d122096400534f243494f8022c7dfb0064bc3de7da0c6c89583f3a6d1f2f247e1c961479fa2a88cbc47d6ef5c17fb1ddb6d0c94132c64c4de858fdc2206a7af0c7bf5eb61c3620063d19ef06950dcc32881cb1aaf30f656ddb1e5a57e194db1767addcb3d964805657fd36ca2f492c4e5ab0f07dd97605d4e2162875337a2fadd97a51a0ac11defbf755561892dc6ab792a0e179c1c8372127a44b9f1a59945a9ed44f66576ebd6c96ddf563fb5bd1af1efae28033ba7734bc56b02a871ef174ac7709fa76da074c4108d72fe92579996d57f062459dbcb9f49c6000"})
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x14)

03:22:04 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {0x600}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:22:04 executing program 2:
socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
ppoll(&(0x7f00000000c0)=[{r1, 0x8124, 0x900}, {r2, 0x0, 0x64}], 0x2, 0x0, 0x0, 0x0)

03:22:04 executing program 4:
socket$netlink(0x10, 0x3, 0x0)
r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x7a98}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0)
ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000001cc0)={{}, "0b9ee17cf4f4ea9402aae71b1cc506df5c646b515438b8a5e23f6217fdf5b844fe681f623a977ec42310bb94d85a3c47bbd0538129ff1686a9b259cfb33a2d881ee31824964951b665bee005ef152c7ef74e6e2d95ccea32d7bd623e6b0ad1da63828c6d03c493be5a6d2e6443347f8065a533470ed2564e2859964a77e9a7ba3a0aaec7cac6796b23b5ad2815d54777402332209f581535663c6ee4b543032cfdf72d775086eead8916a62e127e28327631e31112654fa48eaf626ddc9558d9dead2c0590e49d8703bd8c6b58fe315fbde68297557fa7f162f12162310b128ea469b4b68fcde7af194cc5d7a2138aba6b36c21bd1a1f49d7fe4593f1225cd5d5008900f7a3f4cdb9245705f0ea7e78da1230ffd9b013fa27a5898f1c8fd2f08ce49675475e81c969686d81fd7927bcbc890a6ef038eb0254f2c770d1d67275402c1f566b493ac241e0a3a0249661aaff34d8decffcac1562d8b9809bdc0812d593eef3aef9191e23040f569109a9b82da47cd070eaac78bc9f0fb3e8d8368dd8cd6c6138e21106c37c482a58e501ef76dfdf1cf14f869d22b055adc1453d5526320bfff2b24d4ff0cfb54044d0d7580a8d898535296c4ef3afc9245df222af37db09250b8961dd4234a4ec9091e271a2e89a928f97edad97f0f0062ca94c432540068c7194f9d1492773589f6debff9c9aab3c9832ab16c6514b7867168b1133202dd23781d126a72ba083338fd1aec3e9ea3585b31a4e977e51918ee1230252dcbc04a6845b9b063ee2176eacb6f74aed96faf65860d37ece433094105b47d1325006cb69c75a5bb0e0da9df94f1f7264ed4ca82e0e95ec40015a7b4cec4a0dd91c4904472a83773229258f35ec9de9aeaf9a9089e8c6feb9c8585d399caca23aee057f013a4a7b91e919435e0bbd93dda8522881966afce900b0a49f141d2cda0d24d55d59cb3e4889059f2f357a127201d1602efb793597a2ab848818df6e54e0bdf6225ed12179492ddbdc9cae42e875e5a1a7f0f89f8d9f876dedf669e5b52bbcac851940f40bc7de4170e97f02f4b2ee017a03d4b9da81e649c7407f16ffa8dc4dce87955fa1476256206c08bf1e02fe3b35dba9a6e2f46738b372f7aaa24213baddbd8964b69067b49fa25beca977f77d9352d68caafb3f819fe562ae0e49b8a80067aabb6d03d721c67d212cd1cb60fe7f6e95038017f6cb7877c7f98495dd26683208bd91c990670b2fecc6e27f919052c8f3ecef9fab22f86da94a72b91e9ac964eb2bf171392a33bc11ecce4a3470b84bfc9c6c35993dd9bfa6bcd8b67722152dbbcdd5a2915c809736e2b0b900c3de7667ee3257ef96a8c8fda7c6eed2425adb7435d4a766846cbe96a83bc141f6e8335594adb16386b0de7c2522b792e6f13e8e1b4fd33d48b32b4b8027b12c57b495f5e3e5b43666bdfd23581d94a5a04eca04a46f1ad6b7112f5b0ca084ee05ba0d7b4518c5a56478dfa3e3c8430e879d031dee5bcf84f91b3525e03534d1ab988b458a54ccbd10f0d2d79bf325e99c6774abfe0ff39a9d7d8f71fd493ae1fb43172dfbf6e57afdbce7a0415ab3f2f2cfa615b0b4034b76ad273ba1e3ca2b8030a6c9771f2358719a0d72b982f71615fbfdcf22def70e57d9ffa886d16daf66fbacd3b96f221559758b8d444cc515ae481297bd8d36d3928ce9221b9a256e9520ab19fbcf302dee38caa50fff09cd47fe51fdaa1767e7158336b2ac57617f6c2b21ca2dfe2cf490211960d1963130532122bee78db704b1826e7259cd74e0147d5c2b672c0077dc6cc048159d4c9679b17fd44e7cfb4365ac380f9569ef04d4abb7ff9c570aaf5edfe09dafed6e7b00548b2ef49e469171f127229c59ade4b67885929b8dd32d72ff852adb0bf1d156c4e98f4152230e3dfa7fe5cc5ee12763a04c2e868ff63d61edeca671a62588a072e876df43593b9b69c5a6ce4448ef28ce694cf8a51b3c0ef994c1edf3f775093dca0b801786d7f823e5fa2c217a64b978c28a7a2e0e889e3d3c9db00000000fdea65830bd4643dbd6a6b86f0fbdc3850cdd2617c574024c0a54d2b6b1674bc6d72968abc55fa7290e2591877f909a2010f24edd49b28aef732c71355565fc48c1164dcbaf3757384c33062f1bcab1f89f2dcf1b1d16e4de71392b4b004496f532291a0119bd5cf87393a308de9e1064f0196e16965c91ec3e99dfd6744c216fa01ffdd433bd9f1c0d7698c9712f555333aa2fccb5f1cd52507d4c4543fc84d5f4f6a0e26ecb2be09e3b15529c385995fcbadd74f59889cc2b1dd7f3610481762da4e09d9156ad5e8138e956f6842b42adfe3d9f94e8cdb47b1da96f0152c07c3bdc5798c83a1457441f850712c5a31d847354504cc497d8dafb81fd520b16cc2e14c08a6dc89bf62daf39d6e1a28568d70c925f26384400c386e80312f2a0833b228dda1b10faaf7345f6b670dcf78c7d90a077cf2dd1313680df148e95a6861dd0251dc4580a64df2bb3529304dcf7e5a4cfbcedb480ccb3c97742f43168fa0b26db4c41f0a961b7a344b5607ee9c7a04c24e931379b95c318a3a212abe61ec6edc3757e8d621522e1462737f3a85c817a3dfbf1385db0256e482f0aa1828685f291ad73bab35fb0c2c719ba34010222105dccf2e4a788a0e650a29f22b20b05c1094a6048fe35f43ab331e265d93d3e1d31479840a58d3f2ee8c6b561847fcddcf2cbd6366abeeb9daa030cf6193901de77d57bf5ad03dc6efa90f8e41c77f713c4b6835b029258c0c7d0de796eb7185c9b4070ab2a89d2c420dffc7a5308414ddbe5b851c3adc66a453c5c021b67f000000000000004443523eabde5d635468920b7fea726052730ad009ef35f1f58984a432c4ce647917cd273ecb8b4bb9e4de58cf3319067636c3876f0b7c675c7213ea0b0543cb3b69a59f62cbc35b0f118e7fa48d850a9bb54a01342bccbf70105bb0d38096ce54194169b9d344c6972df35dd23486099f32b9d63e9bc9a11a4450dbeb468892488dc1dd75e5129333b4c21778a5fef0b2c53ef3f40bf87a22473d79f96f2353cdfc401278e03c5894d2be17505376cb2f3d7e859f61ac4c829fd99a8bda388bb2c27d2fdff91dc0e3fb2b0e69097d64b4ee1b186c9428a0932c488ba4f1d172db020b428d56fff9c5bf8ea3c972df9bbb2cc2b175417bd01067edd70de76164ecb6fc9569f2c8e574b4410e37cf9ae6403d93c36b060f36abff0196d8c967ff0f0a92dff1ba5cf8d342922b80bb83313f6db43c42672118bb8309d0bb5473253ee5b7f4b69a14af19854fb59b1bb03aff9bd50cad32438b3419190b7282a19972a9a792eb8e932e9d726238f55427e4c10f4f6b9907a3c220e328c2391b41524636a7e919552a695388f915faf6dda40c7cd917e463818d98f602552af15e5a213c00601eb26ce5e8fe7f9562d0917581e15fb491b266057038b17e2bd52f782213bf6f2fb78914acabb9b1d5360f3498df3418d21f0a40e2e9d8fb3cd38207721af9450a97b5d9fda3c1ef9034d430b686362968ebead2db99d40828d4cbb38da9b92d078e8978addf93aa3a73924f1dc6562d64ca8659025c3299cd92a0d7ad2fe6a352acce8fa7e7d516cc88f38d8b1c88a0c788a6cd7d9df69a353264215d817ab404e898a52d98416456d88f4f8be3397cb5d85103779b387e090e1af47e52da81eb0b9598f3c62598f5e4e2f30c7d79b082208089b8221694fcc4b8a0fb8f378d3625525ca7fe3bf8f55221b88809be17f495bd87dc6772051b3ec1190eb21c3ce3a8be909e2775a7e3b0fbfa106c3d348bea72dcf644af5216f89fe68ec34a1988d678fd32639684b3b2dfcfabdbeafe0af959a459fc86a4f85ec957c259bda9fde5b33df4a40050a03bc334cdb10eed500312d7203b1dba5fb387a12df799ae0aa5437ea49ab0245c9e9ffaf00b2e598fb4db0b1787791f8573ff45129af63527828a69542e6a9ca34af654c6c94852387a4d61bbf07379079dfbcf90975e15f7c6816b8d0b41c00d15cd1f4e1f32eff67fb8a80d1a6f4e4bb73c7b068878a36f7dbdc6b7b8aa6f4ea3f45a3111164587fb414022a15dfe625de3f2fe9f5c6a6bde1954cb4a4d975080f5f70eafcc7af5583e0de0b0cff74c6978609e40fe75b10945d70c2b1c0e20cb78c1b5e3bfca6e2734f3aab732e72984496ea4b7fe29c31f180f4f587ca5a63ddc61f6dd2fe4212b9899e05a25cf9ff404260552c503543563ac2c5212809bd503d6d49b71a20d7f724b33f7f92a42ff96e570cd112c9fbde8fad69fd07f8bf02809828dab2b6170aab3b75618dbfa8b17c10eaf7b5e1118c887b7d0384f5694a7972546b3c95531c26c522c29a76f2552686fbf0e52eaed534a047ddf03aedbceb156c7c0c700e1985c0461146994d8c85ac8084d3a7e7ff76587a0c5aac2de065a425db5dd6ef5d6c022ea527702ee7ba28a17b569f2568ae927f8b8298656ea6f0e864024f311ac96f1c2e583cab4a253788864d0628dfd6ba6221525cfdbb90443d8bcb34d020cbc7345aa251c3abff7138f64aad503bf27bad05027cc0b7756eb1d67814a43a8d03166ed79695fded7f12e6b660a748840981c521b22c0ad8d2fc369ba9911bd3f139e572dbe5def1188f1d7544bcc101172a99eddda3ef9a751ae029c16129ade3f85f2e6782bd7b6cdcda73301da6edc174ddacb8dd95ac29df8ae86576abd21833e7531ad1feb6af0e2f0b1ae086fb711537cc9e2335a1f197dac5f55fcc5748522383eb6367dfca8ef75cb6c44603df6b586700834d3b866f761dcee598b0fed00c0421dc12418f43892dc60f85f2bee8c86f5c1f843416bd26aede440b746d99b71bfc782257a066d9c37eb747d39a23282f39998d3f173ab785a501b350b86167161dc0c56bf8cbc7b2c310bc8c4751db5f8c91195f1092ad5eca51644e2c917ceb384b0fe76f54888d35f6398741b7ffd3df95f56ec87bda861be488268f067149e849a214bcd2e391bc3dee8ca6b2fad77f8371ea4f447bb467b7fbfbac9a491c76124ac9d5e50d8c5bb2f21e936bb2a9924548ccd94fdb1c95f9a734f363d1d79c092ff601462fc02bbba16e97496be1106b0f6c0056185fd312153a2ae0a7dbfc87918cbed2ba94c1c3ef79b1456a1c32fde3fff8a541ad63c16f817930f9080fc1ff6e268e15572f5b7e042e0264f16dfc558495ea801e80e2265b1571833f51b1461b201792555db378bbcc3b99e209b96337b41c7349d1983d1829bb79c17cb61f29cf9c1e5f6da4880bcac4cc0333fe266981c419ae92108cbeaaec794b7e645b31f09be93c84230006cda824055096f1f0cfc356c7be40bfa89360103c7f29cb3cf74ec8e0beebcb4288b068de4793d9f65238ae2861dcf9b5c0f1555c9b2b82f323459f290493ba7798b19cc5dd3d97a98bbc6d122096400534f243494f8022c7dfb0064bc3de7da0c6c89583f3a6d1f2f247e1c961479fa2a88cbc47d6ef5c17fb1ddb6d0c94132c64c4de858fdc2206a7af0c7bf5eb61c3620063d19ef06950dcc32881cb1aaf30f656ddb1e5a57e194db1767addcb3d964805657fd36ca2f492c4e5ab0f07dd97605d4e2162875337a2fadd97a51a0ac11defbf755561892dc6ab792a0e179c1c8372127a44b9f1a59945a9ed44f66576ebd6c96ddf563fb5bd1af1efae28033ba7734bc56b02a871ef174ac7709fa76da074c4108d72fe92579996d57f062459dbcb9f49c6000"})
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x14)

[ 2469.126164][T30605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2469.159097][T30608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2469.195119][T19430] wlan1: authenticate with 08:02:11:00:00:00
[ 2469.207672][T30605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2469.209474][T19430] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2469.244349][T30608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2469.267008][T30460] wlan1: authenticated
[ 2469.275539][T19430] mac80211_hwsim hwsim79 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
[ 2469.299160][T30605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2469.304430][T30460] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[ 2469.346702][T30615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2469.353100][T30446] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[ 2469.413406][T30446] wlan1: associated
03:22:05 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {0x700}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:22:05 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x7000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2469.830856][T30620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2469.872227][T30621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2469.928886][T30623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2469.978163][T30621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:22:05 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)

[ 2470.024109][T30620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2470.103331][T30622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:22:05 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)

03:22:05 executing program 4:
r0 = memfd_create(&(0x7f0000000340)='/dev/dri/card#\x00', 0x7)
lseek(r0, 0x0, 0x2)

03:22:05 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700cc0000000000000000000000000000000000000000000000000000ac840000000300000068030000f0000000f000000000000000f0000000f0000000d0020000d0020000d0020000d0020000d002000043000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800f0000000000000000000000000000000000000000000380071756f746100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480043540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007801e00100000000000000000000000000000000000000000801726563656e74000000000000000000000000000000000000000000000001000100000000000032740ea8b6bd47f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000c0ac00000000feffffff"], 0x1)

03:22:05 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)

03:22:05 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700cc0000000000000000000000000000000000000000000000000000ac840000000300000068030000f0000000f000000000000000f0000000f0000000d0020000d0020000d0020000d0020000d002000043000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800f0000000000000000000000000000000000000000000380071756f746100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480043540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007801e00100000000000000000000000000000000000000000801726563656e74000000000000000000000000000000000000000000000001000100000000000032740ea8b6bd47f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000c0ac00000000feffffff"], 0x1)

03:22:05 executing program 4:
r0 = memfd_create(&(0x7f0000000340)='/dev/dri/card#\x00', 0x7)
lseek(r0, 0x0, 0x2)

03:22:05 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {0x900}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2470.482879][T30642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2470.494475][ T3580] Bluetooth: hci4: command 0x040f tx timeout
[ 2470.589354][T30642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2470.668719][T30642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:22:06 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700cc0000000000000000000000000000000000000000000000000000ac840000000300000068030000f0000000f000000000000000f0000000f0000000d0020000d0020000d0020000d0020000d002000043000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800f0000000000000000000000000000000000000000000380071756f746100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480043540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007801e00100000000000000000000000000000000000000000801726563656e74000000000000000000000000000000000000000000000001000100000000000032740ea8b6bd47f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000c0ac00000000feffffff"], 0x1)

03:22:06 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)

03:22:06 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x8000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:22:06 executing program 2:
socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
ppoll(&(0x7f00000000c0)=[{r1, 0x8124, 0x900}, {r2, 0x0, 0x64}], 0x2, 0x0, 0x0, 0x0)

03:22:06 executing program 4:
r0 = memfd_create(&(0x7f0000000340)='/dev/dri/card#\x00', 0x7)
lseek(r0, 0x0, 0x2)

03:22:06 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {0xa00}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:22:07 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700cc0000000000000000000000000000000000000000000000000000ac840000000300000068030000f0000000f000000000000000f0000000f0000000d0020000d0020000d0020000d0020000d002000043000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800f0000000000000000000000000000000000000000000380071756f746100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480043540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007801e00100000000000000000000000000000000000000000801726563656e74000000000000000000000000000000000000000000000001000100000000000032740ea8b6bd47f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000c0ac00000000feffffff"], 0x1)

03:22:07 executing program 4:
r0 = memfd_create(&(0x7f0000000340)='/dev/dri/card#\x00', 0x7)
lseek(r0, 0x0, 0x2)

03:22:07 executing program 1:
socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
ppoll(&(0x7f00000000c0)=[{r1, 0x8124, 0x900}, {r2, 0x0, 0x64}], 0x2, 0x0, 0x0, 0x0)

[ 2471.480508][T30657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2471.487791][T30661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:22:07 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000895"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x84000, 0x0)

03:22:07 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_clone3(0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
prlimit64(r0, 0x7, &(0x7f0000000240)={0x6, 0x6}, &(0x7f0000000340))
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x2, 0x0, 0x3}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff01, 0x0, 0x0, 0x0, 0x6}, [@generic={0x0, 0x0, 0x0, 0xffff}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x3}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x2, 0x4}, 0x8, 0x10, 0x0}, 0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000000fad413e550000000f04000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
syz_open_dev$vcsn(0x0, 0x6, 0x101b01)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x16, 0x7, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@map_val={0x18, 0x1}, @cb_func={0x18, 0xa}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0xfd, &(0x7f00000005c0)=""/253, 0x41100, 0x4, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r3}, 0x80)
mkdir(&(0x7f00000002c0)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000780)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.'])

[ 2471.561631][T30657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2471.597213][T30661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:22:07 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

[ 2471.644985][T30657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2471.687136][T30661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2471.859200][T30682] overlayfs: missing 'lowerdir'
03:22:07 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

03:22:07 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {0xb00}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:22:07 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x9000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2472.337222][ T1253] ieee802154 phy0 wpan0: encryption failed: -22
[ 2472.344134][ T1253] ieee802154 phy1 wpan1: encryption failed: -22
[ 2472.526243][T30693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2472.558580][T30694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2472.654817][ T3580] Bluetooth: hci4: command 0x0419 tx timeout
[ 2472.681507][T30693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2472.713699][T30694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2472.740762][T30692] wlan1: authenticate with 08:02:11:00:00:00
[ 2472.750457][T30692] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2472.759136][T30407] wlan1: authenticated
[ 2472.763494][T29724] mac80211_hwsim hwsim79 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
[ 2472.790032][T30689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2472.800863][T30690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2472.824397][T30407] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[ 2472.833452][T30407] wlan1: associated
03:22:09 executing program 2:
socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
ppoll(&(0x7f00000000c0)=[{r1, 0x8124, 0x900}, {r2, 0x0, 0x64}], 0x2, 0x0, 0x0, 0x0)

03:22:09 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_clone3(0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
prlimit64(r0, 0x7, &(0x7f0000000240)={0x6, 0x6}, &(0x7f0000000340))
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x2, 0x0, 0x3}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff01, 0x0, 0x0, 0x0, 0x6}, [@generic={0x0, 0x0, 0x0, 0xffff}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x3}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x2, 0x4}, 0x8, 0x10, 0x0}, 0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000000fad413e550000000f04000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
syz_open_dev$vcsn(0x0, 0x6, 0x101b01)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x16, 0x7, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@map_val={0x18, 0x1}, @cb_func={0x18, 0xa}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0xfd, &(0x7f00000005c0)=""/253, 0x41100, 0x4, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r3}, 0x80)
mkdir(&(0x7f00000002c0)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000780)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.'])

03:22:09 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

03:22:09 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {0xc00}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:22:09 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0xa000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2474.163440][T30702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2474.169237][T30703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2474.360148][T30708] overlayfs: missing 'lowerdir'
[ 2474.543171][T30710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2474.594373][T30702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2474.668805][T30703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2474.685876][T30702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:22:10 executing program 1:
socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
ppoll(&(0x7f00000000c0)=[{r1, 0x8124, 0x900}, {r2, 0x0, 0x64}], 0x2, 0x0, 0x0, 0x0)

03:22:10 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

03:22:10 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0xb000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:22:10 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {0xd00}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:22:10 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_clone3(0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
prlimit64(r0, 0x7, &(0x7f0000000240)={0x6, 0x6}, &(0x7f0000000340))
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x2, 0x0, 0x3}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff01, 0x0, 0x0, 0x0, 0x6}, [@generic={0x0, 0x0, 0x0, 0xffff}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x3}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x2, 0x4}, 0x8, 0x10, 0x0}, 0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000000fad413e550000000f04000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
syz_open_dev$vcsn(0x0, 0x6, 0x101b01)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x16, 0x7, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@map_val={0x18, 0x1}, @cb_func={0x18, 0xa}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0xfd, &(0x7f00000005c0)=""/253, 0x41100, 0x4, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r3}, 0x80)
mkdir(&(0x7f00000002c0)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000780)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.'])

[ 2475.460539][T30720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2475.473594][T30722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:22:11 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r1)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x54, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGM\x00\xf0'}]}, 0x54}}, 0x0)

[ 2475.642818][T30725] overlayfs: missing 'lowerdir'
[ 2475.795506][T30730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2475.841315][T30722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2475.923957][T30720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2475.941074][T30722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:22:11 executing program 4:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000009c00000000000000000000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = io_uring_setup(0x45da, &(0x7f0000000280))
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)
listen(r2, 0x0)
accept(r2, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

03:22:12 executing program 2:
socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
ppoll(&(0x7f00000000c0)=[{r1, 0x8124, 0x900}, {r2, 0x0, 0x64}], 0x2, 0x0, 0x0, 0x0)

03:22:12 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {0xe00}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:22:12 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_clone3(0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
prlimit64(r0, 0x7, &(0x7f0000000240)={0x6, 0x6}, &(0x7f0000000340))
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x2, 0x0, 0x3}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff01, 0x0, 0x0, 0x0, 0x6}, [@generic={0x0, 0x0, 0x0, 0xffff}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x3}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x2, 0x4}, 0x8, 0x10, 0x0}, 0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000000fad413e550000000f04000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
syz_open_dev$vcsn(0x0, 0x6, 0x101b01)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x16, 0x7, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@map_val={0x18, 0x1}, @cb_func={0x18, 0xa}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0xfd, &(0x7f00000005c0)=""/253, 0x41100, 0x4, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r3}, 0x80)
mkdir(&(0x7f00000002c0)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000780)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.'])

03:22:12 executing program 4:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000009c00000000000000000000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = io_uring_setup(0x45da, &(0x7f0000000280))
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)
listen(r2, 0x0)
accept(r2, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

03:22:12 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0xc000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2477.464361][T30738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2477.478194][T30743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2477.675406][T30747] overlayfs: missing 'lowerdir'
[ 2477.864091][T30743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2477.908849][T30738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2478.001335][T30743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2478.015555][T30753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:22:14 executing program 1:
socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
ppoll(&(0x7f00000000c0)=[{r1, 0x8124, 0x900}, {r2, 0x0, 0x64}], 0x2, 0x0, 0x0, 0x0)

03:22:14 executing program 4:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000009c00000000000000000000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = io_uring_setup(0x45da, &(0x7f0000000280))
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)
listen(r2, 0x0)
accept(r2, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

03:22:14 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0xd000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:22:14 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {0xf00}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:22:14 executing program 0:
r0 = syz_open_dev$cec(&(0x7f00000002c0), 0x1, 0x2)
ioctl$EXT4_IOC_MIGRATE(r0, 0x805c6103)

03:22:14 executing program 0:
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1000, &(0x7f00000005c0)=ANY=[@ANYRES8], 0x0, 0x42e, &(0x7f0000000900)="$eJzs3E9vFGUcB/DvbFuIgBYV/yFoFYQq2tqiqIkh4eaB6EEPXhtaKrEUpTURQgwkHryayAvQeJWXYNTEPxc9Ga5q9KAkxEAPHIypme1uu5Ru6ULLGvbzSWZ5nplZnmfmyW9m5+kvE6Bj9ZUfRbIpyc9JeueqV+/QN/fPzKVTh8qlyOzs638X1f0uXzp1qL5r/Xsby49K0l9JKh8WeXiJdqdOnHx7ZGJi7HitPjh99J3BqRMnnzlydGR8bHxscmjv0L59Lzz/4vDQqh3rKz/N/PFZ96uTn5+9PHll//CGsr+batsaj2O19KXv6nPZYNdqN9Zm9zWUi+42doSWdCUph6unGv+96crC4PXm+1/b2jlgTc2W1jfdfHoWuI0VaXcPgPao3+jL59/6cqt+e9B+Fw/MPQBers3tzMyPf3cqc4V3d3379VXP96upL8mbB1/bXi5Zo3kYAAAAgE721YEkTy81/1fJ/Q37leUHkjyY5KEkW5NqXs+2JNuTPJLk0Xo+UQsW73/t/E/lwg0dGCty8UDyckNu10zD+Nds7qrV7iwr6SkOH5kYezbJXUn607O+rC+XpXX0rZEfm21rnP8rl7L9+lxgrR8Xuhf9fXp0ZHrkZo6ZBRfPJFu7lxr/Yj4TqEjyWJLHV/IfflfNqBvfcu6f+VUvfXTv+Wa7X3/8WUuznya7l4z/hczFYvn8zMHq9WCwflW41g9n933RrH3j315l/G9Yfvw3F435ulOtt/HNlt9+abbtRq//64o3qh1cV1v3/sj09PGhZF1x8Nr1w633+XZVPx/181WOf/+Ope//99S+U57QHUl2Jnmilru8u3rvT55M8lSSPcu0eXr893+bbRP/7VWO/2hL8d964a8zH+9s1v7K4v+5amf6a2v8/ru+lQ5Qu/sJAAAAAAAAwOqoVN+BV1QG5suVysDA3Dv8tmRDZeLY1PSew8femxyde1fe5vRU6plevQ35oEPV8kJ9eFF9b5K7k3zSdUe1PnDo2MRouw8eOtzGJvFf+rOr3b0D1pz3tULnEv/QucQ/dC7xD51L/EPnEv/QucQ/dC7xD51rcfx/cP7g/itfbjvXpu4At5D7P3Skm3mvn4KCwu1aaPeVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/4b8AAAD//y2P0tw=")
unshare(0x26020400)
ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x6, 0x7f})
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080), 0x4)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0), 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
creat(&(0x7f0000000280)='./bus\x00', 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fadvise64(r2, 0x232, 0xdce, 0x4)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={<r3=>0x0, @local, @local}, &(0x7f0000000580)=0xffffff99)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000400)={@private0, 0x5, r3})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, <r4=>0x0}, 0x8)
r5 = socket$igmp6(0xa, 0x3, 0x2)
connect$unix(0xffffffffffffffff, &(0x7f0000000640)=@file={0x1, './file0\x00'}, 0x6e)
setsockopt$inet6_buf(r5, 0x29, 0x30, &(0x7f0000000000)="958ee319f19b00719b576755e6001546c8cec24c332255c78fceae88ca23a41d22951a1a3dfca7266687d20e5064e2a5faf7bb38c1138d940b1d20c2b2726826fb693b163c848a751c7ce34f39ecaebcc9b99afbe66da1ca1a55fdba8137549e4150efc6a077bdda545ccac2a12d00d3f259dbc007bded134946501cda3f", 0x7e)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r4}, 0x80)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
dup2(0xffffffffffffffff, r6)
openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x402c0, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0x0, 0x80000000, 0x30}, 0xc)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000500), 0x4800, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000540)={[0x671d]}, 0x8, 0x80000)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x0)

[ 2479.137330][T30765] wlan1: authenticate with 08:02:11:00:00:00
[ 2479.143815][T30763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2479.195932][T30763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2479.205101][T30765] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2479.226453][T30767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:22:14 executing program 4:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000009c00000000000000000000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = io_uring_setup(0x45da, &(0x7f0000000280))
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)
listen(r2, 0x0)
accept(r2, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

[ 2479.273828][T30763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2479.336627][T30407] wlan1: authenticated
[ 2479.341985][T30765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2479.360945][T22270] mac80211_hwsim hwsim79 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
[ 2479.389998][T30771] device wireguard3 entered promiscuous mode
[ 2479.394687][T30407] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[ 2479.497044][T30407] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[ 2479.507219][T30765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2479.526135][T30407] wlan1: associated
03:22:15 executing program 4:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0x0, @host}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
listen(r0, 0x0)
connect$vsock_stream(r1, &(0x7f0000000040), 0x10)
accept4$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1, 0xfffffffe}, 0x10, 0x0)

03:22:16 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0xe000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:22:16 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {0x1100}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:22:16 executing program 0:
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1000, &(0x7f00000005c0)=ANY=[@ANYRES8], 0x0, 0x42e, &(0x7f0000000900)="$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")
unshare(0x26020400)
ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x6, 0x7f})
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080), 0x4)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0), 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
creat(&(0x7f0000000280)='./bus\x00', 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fadvise64(r2, 0x232, 0xdce, 0x4)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={<r3=>0x0, @local, @local}, &(0x7f0000000580)=0xffffff99)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000400)={@private0, 0x5, r3})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, <r4=>0x0}, 0x8)
r5 = socket$igmp6(0xa, 0x3, 0x2)
connect$unix(0xffffffffffffffff, &(0x7f0000000640)=@file={0x1, './file0\x00'}, 0x6e)
setsockopt$inet6_buf(r5, 0x29, 0x30, &(0x7f0000000000)="958ee319f19b00719b576755e6001546c8cec24c332255c78fceae88ca23a41d22951a1a3dfca7266687d20e5064e2a5faf7bb38c1138d940b1d20c2b2726826fb693b163c848a751c7ce34f39ecaebcc9b99afbe66da1ca1a55fdba8137549e4150efc6a077bdda545ccac2a12d00d3f259dbc007bded134946501cda3f", 0x7e)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r4}, 0x80)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
dup2(0xffffffffffffffff, r6)
openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x402c0, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0x0, 0x80000000, 0x30}, 0xc)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000500), 0x4800, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000540)={[0x671d]}, 0x8, 0x80000)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x0)

03:22:16 executing program 4:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0x0, @host}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
listen(r0, 0x0)
connect$vsock_stream(r1, &(0x7f0000000040), 0x10)
accept4$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1, 0xfffffffe}, 0x10, 0x0)

[ 2480.847315][T30786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2480.865902][T30787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2480.921803][T30782] device wireguard3 entered promiscuous mode
[ 2480.931758][T30789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2480.952273][T30787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2481.016230][T30786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2481.031159][T30790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:22:16 executing program 0:
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1000, &(0x7f00000005c0)=ANY=[@ANYRES8], 0x0, 0x42e, &(0x7f0000000900)="$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")
unshare(0x26020400)
ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x6, 0x7f})
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080), 0x4)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0), 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
creat(&(0x7f0000000280)='./bus\x00', 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fadvise64(r2, 0x232, 0xdce, 0x4)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={<r3=>0x0, @local, @local}, &(0x7f0000000580)=0xffffff99)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000400)={@private0, 0x5, r3})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, <r4=>0x0}, 0x8)
r5 = socket$igmp6(0xa, 0x3, 0x2)
connect$unix(0xffffffffffffffff, &(0x7f0000000640)=@file={0x1, './file0\x00'}, 0x6e)
setsockopt$inet6_buf(r5, 0x29, 0x30, &(0x7f0000000000)="958ee319f19b00719b576755e6001546c8cec24c332255c78fceae88ca23a41d22951a1a3dfca7266687d20e5064e2a5faf7bb38c1138d940b1d20c2b2726826fb693b163c848a751c7ce34f39ecaebcc9b99afbe66da1ca1a55fdba8137549e4150efc6a077bdda545ccac2a12d00d3f259dbc007bded134946501cda3f", 0x7e)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r4}, 0x80)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
dup2(0xffffffffffffffff, r6)
openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x402c0, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0x0, 0x80000000, 0x30}, 0xc)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000500), 0x4800, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000540)={[0x671d]}, 0x8, 0x80000)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x0)

03:22:16 executing program 1:
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1000, &(0x7f00000005c0)=ANY=[@ANYRES8], 0x0, 0x42e, &(0x7f0000000900)="$eJzs3E9vFGUcB/DvbFuIgBYV/yFoFYQq2tqiqIkh4eaB6EEPXhtaKrEUpTURQgwkHryayAvQeJWXYNTEPxc9Ga5q9KAkxEAPHIypme1uu5Ru6ULLGvbzSWZ5nplZnmfmyW9m5+kvE6Bj9ZUfRbIpyc9JeueqV+/QN/fPzKVTh8qlyOzs638X1f0uXzp1qL5r/Xsby49K0l9JKh8WeXiJdqdOnHx7ZGJi7HitPjh99J3BqRMnnzlydGR8bHxscmjv0L59Lzz/4vDQqh3rKz/N/PFZ96uTn5+9PHll//CGsr+batsaj2O19KXv6nPZYNdqN9Zm9zWUi+42doSWdCUph6unGv+96crC4PXm+1/b2jlgTc2W1jfdfHoWuI0VaXcPgPao3+jL59/6cqt+e9B+Fw/MPQBers3tzMyPf3cqc4V3d3379VXP96upL8mbB1/bXi5Zo3kYAAAAgE721YEkTy81/1fJ/Q37leUHkjyY5KEkW5NqXs+2JNuTPJLk0Xo+UQsW73/t/E/lwg0dGCty8UDyckNu10zD+Nds7qrV7iwr6SkOH5kYezbJXUn607O+rC+XpXX0rZEfm21rnP8rl7L9+lxgrR8Xuhf9fXp0ZHrkZo6ZBRfPJFu7lxr/Yj4TqEjyWJLHV/IfflfNqBvfcu6f+VUvfXTv+Wa7X3/8WUuznya7l4z/hczFYvn8zMHq9WCwflW41g9n933RrH3j315l/G9Yfvw3F435ulOtt/HNlt9+abbtRq//64o3qh1cV1v3/sj09PGhZF1x8Nr1w633+XZVPx/181WOf/+Ope//99S+U57QHUl2Jnmilru8u3rvT55M8lSSPcu0eXr893+bbRP/7VWO/2hL8d964a8zH+9s1v7K4v+5amf6a2v8/ru+lQ5Qu/sJAAAAAAAAwOqoVN+BV1QG5suVysDA3Dv8tmRDZeLY1PSew8femxyde1fe5vRU6plevQ35oEPV8kJ9eFF9b5K7k3zSdUe1PnDo2MRouw8eOtzGJvFf+rOr3b0D1pz3tULnEv/QucQ/dC7xD51L/EPnEv/QucQ/dC7xD51rcfx/cP7g/itfbjvXpu4At5D7P3Skm3mvn4KCwu1aaPeVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/4b8AAAD//y2P0tw=")
unshare(0x26020400)
ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x6, 0x7f})
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080), 0x4)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0), 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
creat(&(0x7f0000000280)='./bus\x00', 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fadvise64(r2, 0x232, 0xdce, 0x4)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={<r3=>0x0, @local, @local}, &(0x7f0000000580)=0xffffff99)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000400)={@private0, 0x5, r3})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, <r4=>0x0}, 0x8)
r5 = socket$igmp6(0xa, 0x3, 0x2)
connect$unix(0xffffffffffffffff, &(0x7f0000000640)=@file={0x1, './file0\x00'}, 0x6e)
setsockopt$inet6_buf(r5, 0x29, 0x30, &(0x7f0000000000)="958ee319f19b00719b576755e6001546c8cec24c332255c78fceae88ca23a41d22951a1a3dfca7266687d20e5064e2a5faf7bb38c1138d940b1d20c2b2726826fb693b163c848a751c7ce34f39ecaebcc9b99afbe66da1ca1a55fdba8137549e4150efc6a077bdda545ccac2a12d00d3f259dbc007bded134946501cda3f", 0x7e)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r4}, 0x80)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
dup2(0xffffffffffffffff, r6)
openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x402c0, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0x0, 0x80000000, 0x30}, 0xc)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000500), 0x4800, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000540)={[0x671d]}, 0x8, 0x80000)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x0)

03:22:16 executing program 2:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0x0, @host}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
listen(r0, 0x0)
connect$vsock_stream(r1, &(0x7f0000000040), 0x10)
accept4$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1, 0xfffffffe}, 0x10, 0x0)

03:22:16 executing program 4:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0x0, @host}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
listen(r0, 0x0)
connect$vsock_stream(r1, &(0x7f0000000040), 0x10)
accept4$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1, 0xfffffffe}, 0x10, 0x0)

03:22:16 executing program 2:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0x0, @host}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
listen(r0, 0x0)
connect$vsock_stream(r1, &(0x7f0000000040), 0x10)
accept4$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1, 0xfffffffe}, 0x10, 0x0)

03:22:16 executing program 4:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0x0, @host}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
listen(r0, 0x0)
connect$vsock_stream(r1, &(0x7f0000000040), 0x10)
accept4$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1, 0xfffffffe}, 0x10, 0x0)

03:22:16 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {0x1200}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:22:17 executing program 2:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0x0, @host}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
listen(r0, 0x0)
connect$vsock_stream(r1, &(0x7f0000000040), 0x10)
accept4$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1, 0xfffffffe}, 0x10, 0x0)

[ 2481.592359][T30446] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2481.605045][T30810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2481.720992][T30810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2481.795870][T30446] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2481.839111][T30803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2481.908303][T30446] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2482.010536][T30446] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2483.006106][T30446] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING)
[ 2483.216449][T30446] device hsr_slave_0 left promiscuous mode
[ 2483.223320][T30446] device hsr_slave_1 left promiscuous mode
[ 2483.234967][T30446] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2483.242570][T30446] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2483.261278][T30446] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2483.270036][T30446] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2483.281743][T30446] device bridge_slave_1 left promiscuous mode
[ 2483.289503][T30446] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2483.300977][T30446] device bridge_slave_0 left promiscuous mode
[ 2483.309010][T30446] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2483.332135][T30446] device veth1_macvtap left promiscuous mode
[ 2483.339176][T30446] device veth0_macvtap left promiscuous mode
[ 2483.346701][T30446] device veth1_vlan left promiscuous mode
[ 2483.353249][T30446] device veth0_vlan left promiscuous mode
[ 2483.892619][T30446] team0 (unregistering): Port device team_slave_1 removed
[ 2483.916067][T30446] team0 (unregistering): Port device team_slave_0 removed
[ 2483.936059][T30446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2483.954986][ T3580] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2483.968704][ T3580] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2483.977176][T30446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2483.977879][ T3580] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2483.997342][ T3580] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2484.006189][ T3580] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 2484.015339][ T3580] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2484.119349][T30446] bond0 (unregistering): Released all slaves
[ 2484.461216][T30840] chnl_net:caif_netlink_parms(): no params data found
[ 2484.622169][T30840] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2484.654066][T30840] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2484.686771][T30840] device bridge_slave_0 entered promiscuous mode
[ 2484.737420][T30840] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2484.756902][T30840] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2484.777661][T30840] device bridge_slave_1 entered promiscuous mode
[ 2484.873078][T30840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2484.916398][T30840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2485.007007][T30840] team0: Port device team_slave_0 added
[ 2485.037866][T30840] team0: Port device team_slave_1 added
[ 2485.122052][T30840] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2485.162732][T30840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2485.197284][T30840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2485.230286][T30840] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2485.239772][T30840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2485.277384][T30840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2485.396435][T30840] device hsr_slave_0 entered promiscuous mode
[ 2485.417302][T30840] device hsr_slave_1 entered promiscuous mode
[ 2485.441676][T30840] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2485.450022][T30840] Cannot create hsr debugfs directory
[ 2486.094342][T21395] Bluetooth: hci4: command 0x0409 tx timeout
[ 2486.759669][T30840] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2486.777019][T30840] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2486.788343][T30840] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2486.799352][T30840] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2486.950055][T30840] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2486.973374][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2486.982092][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2486.997487][T30840] 8021q: adding VLAN 0 to HW filter on device team0
[ 2487.016490][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2487.025619][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2487.034203][ T4448] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2487.041342][ T4448] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2487.052066][T21991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2487.072026][T22270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2487.093064][T22270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2487.102884][T22270] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2487.110645][T22270] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2487.123268][T22270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2487.147080][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2487.158578][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2487.170070][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2487.195679][T22270] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2487.206222][T22270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2487.219553][T22270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2487.230407][T22270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2487.250627][T22270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2487.271073][T22270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2487.290199][T22270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2487.310598][T30840] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2487.604764][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2487.613042][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2487.643100][T30840] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2487.707997][T19430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2487.720233][T19430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2487.752611][T19430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2487.763712][T19430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2487.778048][T30840] device veth0_vlan entered promiscuous mode
[ 2487.789011][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2487.800739][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2487.823810][T30840] device veth1_vlan entered promiscuous mode
[ 2487.906743][T19430] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2487.917651][T19430] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2487.927601][T19430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2487.938223][T19430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2487.962352][T30840] device veth0_macvtap entered promiscuous mode
[ 2487.980732][T30840] device veth1_macvtap entered promiscuous mode
[ 2488.026041][T30840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2488.037626][T30840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2488.054342][T30840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2488.066189][T30840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2488.077863][T30840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2488.089683][T30840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2488.106199][T30840] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2488.118001][T22270] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2488.128551][T22270] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2488.138709][T22270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2488.149362][T22270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2488.164032][T30840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2488.177958][T30840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2488.189853][T30840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2488.191493][T21395] Bluetooth: hci4: command 0x041b tx timeout
[ 2488.201818][T30840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2488.217805][T30840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2488.229645][T30840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2488.243750][T30840] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2488.266302][T19430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2488.286785][T19430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2488.301209][T30840] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2488.314915][T30840] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2488.325262][T30840] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2488.336548][T30840] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2488.469896][T30407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2488.494477][T30407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2488.508700][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2488.573720][T30407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2488.604382][T30407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2488.632817][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2488.743326][T30917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2488.781396][ T8472] wlan1: authenticate with 08:02:11:00:00:00
[ 2488.804264][ T8472] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2488.807781][T30920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2488.814044][T30407] wlan1: authenticated
[ 2488.841823][ T8472] mac80211_hwsim hwsim81 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
[ 2488.864517][T30407] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[ 2488.897888][T30917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2488.899383][T30407] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[ 2488.929851][T30407] wlan1: associated
03:22:24 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0xf000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:22:24 executing program 4:
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1000, &(0x7f00000005c0)=ANY=[@ANYRES8], 0x0, 0x42e, &(0x7f0000000900)="$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")
unshare(0x26020400)
ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x6, 0x7f})
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080), 0x4)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0), 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
creat(&(0x7f0000000280)='./bus\x00', 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fadvise64(r2, 0x232, 0xdce, 0x4)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={<r3=>0x0, @local, @local}, &(0x7f0000000580)=0xffffff99)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000400)={@private0, 0x5, r3})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, <r4=>0x0}, 0x8)
r5 = socket$igmp6(0xa, 0x3, 0x2)
connect$unix(0xffffffffffffffff, &(0x7f0000000640)=@file={0x1, './file0\x00'}, 0x6e)
setsockopt$inet6_buf(r5, 0x29, 0x30, &(0x7f0000000000)="958ee319f19b00719b576755e6001546c8cec24c332255c78fceae88ca23a41d22951a1a3dfca7266687d20e5064e2a5faf7bb38c1138d940b1d20c2b2726826fb693b163c848a751c7ce34f39ecaebcc9b99afbe66da1ca1a55fdba8137549e4150efc6a077bdda545ccac2a12d00d3f259dbc007bded134946501cda3f", 0x7e)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r4}, 0x80)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
dup2(0xffffffffffffffff, r6)
openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x402c0, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0x0, 0x80000000, 0x30}, 0xc)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000500), 0x4800, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000540)={[0x671d]}, 0x8, 0x80000)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x0)

03:22:24 executing program 2:
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1000, &(0x7f00000005c0)=ANY=[@ANYRES8], 0x0, 0x42e, &(0x7f0000000900)="$eJzs3E9vFGUcB/DvbFuIgBYV/yFoFYQq2tqiqIkh4eaB6EEPXhtaKrEUpTURQgwkHryayAvQeJWXYNTEPxc9Ga5q9KAkxEAPHIypme1uu5Ru6ULLGvbzSWZ5nplZnmfmyW9m5+kvE6Bj9ZUfRbIpyc9JeueqV+/QN/fPzKVTh8qlyOzs638X1f0uXzp1qL5r/Xsby49K0l9JKh8WeXiJdqdOnHx7ZGJi7HitPjh99J3BqRMnnzlydGR8bHxscmjv0L59Lzz/4vDQqh3rKz/N/PFZ96uTn5+9PHll//CGsr+batsaj2O19KXv6nPZYNdqN9Zm9zWUi+42doSWdCUph6unGv+96crC4PXm+1/b2jlgTc2W1jfdfHoWuI0VaXcPgPao3+jL59/6cqt+e9B+Fw/MPQBers3tzMyPf3cqc4V3d3379VXP96upL8mbB1/bXi5Zo3kYAAAAgE721YEkTy81/1fJ/Q37leUHkjyY5KEkW5NqXs+2JNuTPJLk0Xo+UQsW73/t/E/lwg0dGCty8UDyckNu10zD+Nds7qrV7iwr6SkOH5kYezbJXUn607O+rC+XpXX0rZEfm21rnP8rl7L9+lxgrR8Xuhf9fXp0ZHrkZo6ZBRfPJFu7lxr/Yj4TqEjyWJLHV/IfflfNqBvfcu6f+VUvfXTv+Wa7X3/8WUuznya7l4z/hczFYvn8zMHq9WCwflW41g9n933RrH3j315l/G9Yfvw3F435ulOtt/HNlt9+abbtRq//64o3qh1cV1v3/sj09PGhZF1x8Nr1w633+XZVPx/181WOf/+Ope//99S+U57QHUl2Jnmilru8u3rvT55M8lSSPcu0eXr893+bbRP/7VWO/2hL8d964a8zH+9s1v7K4v+5amf6a2v8/ru+lQ5Qu/sJAAAAAAAAwOqoVN+BV1QG5suVysDA3Dv8tmRDZeLY1PSew8femxyde1fe5vRU6plevQ35oEPV8kJ9eFF9b5K7k3zSdUe1PnDo2MRouw8eOtzGJvFf+rOr3b0D1pz3tULnEv/QucQ/dC7xD51L/EPnEv/QucQ/dC7xD51rcfx/cP7g/itfbjvXpu4At5D7P3Skm3mvn4KCwu1aaPeVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/4b8AAAD//y2P0tw=")
unshare(0x26020400)
ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x6, 0x7f})
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080), 0x4)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0), 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
creat(&(0x7f0000000280)='./bus\x00', 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fadvise64(r2, 0x232, 0xdce, 0x4)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={<r3=>0x0, @local, @local}, &(0x7f0000000580)=0xffffff99)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000400)={@private0, 0x5, r3})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, <r4=>0x0}, 0x8)
r5 = socket$igmp6(0xa, 0x3, 0x2)
connect$unix(0xffffffffffffffff, &(0x7f0000000640)=@file={0x1, './file0\x00'}, 0x6e)
setsockopt$inet6_buf(r5, 0x29, 0x30, &(0x7f0000000000)="958ee319f19b00719b576755e6001546c8cec24c332255c78fceae88ca23a41d22951a1a3dfca7266687d20e5064e2a5faf7bb38c1138d940b1d20c2b2726826fb693b163c848a751c7ce34f39ecaebcc9b99afbe66da1ca1a55fdba8137549e4150efc6a077bdda545ccac2a12d00d3f259dbc007bded134946501cda3f", 0x7e)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r4}, 0x80)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
dup2(0xffffffffffffffff, r6)
openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x402c0, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0x0, 0x80000000, 0x30}, 0xc)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000500), 0x4800, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000540)={[0x671d]}, 0x8, 0x80000)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x0)

03:22:24 executing program 0:
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1000, &(0x7f00000005c0)=ANY=[@ANYRES8], 0x0, 0x42e, &(0x7f0000000900)="$eJzs3E9vFGUcB/DvbFuIgBYV/yFoFYQq2tqiqIkh4eaB6EEPXhtaKrEUpTURQgwkHryayAvQeJWXYNTEPxc9Ga5q9KAkxEAPHIypme1uu5Ru6ULLGvbzSWZ5nplZnmfmyW9m5+kvE6Bj9ZUfRbIpyc9JeueqV+/QN/fPzKVTh8qlyOzs638X1f0uXzp1qL5r/Xsby49K0l9JKh8WeXiJdqdOnHx7ZGJi7HitPjh99J3BqRMnnzlydGR8bHxscmjv0L59Lzz/4vDQqh3rKz/N/PFZ96uTn5+9PHll//CGsr+batsaj2O19KXv6nPZYNdqN9Zm9zWUi+42doSWdCUph6unGv+96crC4PXm+1/b2jlgTc2W1jfdfHoWuI0VaXcPgPao3+jL59/6cqt+e9B+Fw/MPQBers3tzMyPf3cqc4V3d3379VXP96upL8mbB1/bXi5Zo3kYAAAAgE721YEkTy81/1fJ/Q37leUHkjyY5KEkW5NqXs+2JNuTPJLk0Xo+UQsW73/t/E/lwg0dGCty8UDyckNu10zD+Nds7qrV7iwr6SkOH5kYezbJXUn607O+rC+XpXX0rZEfm21rnP8rl7L9+lxgrR8Xuhf9fXp0ZHrkZo6ZBRfPJFu7lxr/Yj4TqEjyWJLHV/IfflfNqBvfcu6f+VUvfXTv+Wa7X3/8WUuznya7l4z/hczFYvn8zMHq9WCwflW41g9n933RrH3j315l/G9Yfvw3F435ulOtt/HNlt9+abbtRq//64o3qh1cV1v3/sj09PGhZF1x8Nr1w633+XZVPx/181WOf/+Ope//99S+U57QHUl2Jnmilru8u3rvT55M8lSSPcu0eXr893+bbRP/7VWO/2hL8d964a8zH+9s1v7K4v+5amf6a2v8/ru+lQ5Qu/sJAAAAAAAAwOqoVN+BV1QG5suVysDA3Dv8tmRDZeLY1PSew8femxyde1fe5vRU6plevQ35oEPV8kJ9eFF9b5K7k3zSdUe1PnDo2MRouw8eOtzGJvFf+rOr3b0D1pz3tULnEv/QucQ/dC7xD51L/EPnEv/QucQ/dC7xD51rcfx/cP7g/itfbjvXpu4At5D7P3Skm3mvn4KCwu1aaPeVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/4b8AAAD//y2P0tw=")
unshare(0x26020400)
ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x6, 0x7f})
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080), 0x4)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0), 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
creat(&(0x7f0000000280)='./bus\x00', 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fadvise64(r2, 0x232, 0xdce, 0x4)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={<r3=>0x0, @local, @local}, &(0x7f0000000580)=0xffffff99)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000400)={@private0, 0x5, r3})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, <r4=>0x0}, 0x8)
r5 = socket$igmp6(0xa, 0x3, 0x2)
connect$unix(0xffffffffffffffff, &(0x7f0000000640)=@file={0x1, './file0\x00'}, 0x6e)
setsockopt$inet6_buf(r5, 0x29, 0x30, &(0x7f0000000000)="958ee319f19b00719b576755e6001546c8cec24c332255c78fceae88ca23a41d22951a1a3dfca7266687d20e5064e2a5faf7bb38c1138d940b1d20c2b2726826fb693b163c848a751c7ce34f39ecaebcc9b99afbe66da1ca1a55fdba8137549e4150efc6a077bdda545ccac2a12d00d3f259dbc007bded134946501cda3f", 0x7e)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r4}, 0x80)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
dup2(0xffffffffffffffff, r6)
openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x402c0, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0x0, 0x80000000, 0x30}, 0xc)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000500), 0x4800, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000540)={[0x671d]}, 0x8, 0x80000)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x0)

03:22:24 executing program 1:
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1000, &(0x7f00000005c0)=ANY=[@ANYRES8], 0x0, 0x42e, &(0x7f0000000900)="$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")
unshare(0x26020400)
ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x6, 0x7f})
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080), 0x4)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0), 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
creat(&(0x7f0000000280)='./bus\x00', 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fadvise64(r2, 0x232, 0xdce, 0x4)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={<r3=>0x0, @local, @local}, &(0x7f0000000580)=0xffffff99)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000400)={@private0, 0x5, r3})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, <r4=>0x0}, 0x8)
r5 = socket$igmp6(0xa, 0x3, 0x2)
connect$unix(0xffffffffffffffff, &(0x7f0000000640)=@file={0x1, './file0\x00'}, 0x6e)
setsockopt$inet6_buf(r5, 0x29, 0x30, &(0x7f0000000000)="958ee319f19b00719b576755e6001546c8cec24c332255c78fceae88ca23a41d22951a1a3dfca7266687d20e5064e2a5faf7bb38c1138d940b1d20c2b2726826fb693b163c848a751c7ce34f39ecaebcc9b99afbe66da1ca1a55fdba8137549e4150efc6a077bdda545ccac2a12d00d3f259dbc007bded134946501cda3f", 0x7e)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r4}, 0x80)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
dup2(0xffffffffffffffff, r6)
openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x402c0, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0x0, 0x80000000, 0x30}, 0xc)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000500), 0x4800, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000540)={[0x671d]}, 0x8, 0x80000)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x0)

03:22:24 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {0x1619}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2489.312749][T30939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2489.418076][T30940] device wireguard0 entered promiscuous mode
[ 2489.430160][T30939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2489.497471][T30939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2489.512186][T30953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2489.533286][T30935] device wireguard0 entered promiscuous mode
[ 2489.586172][T30941] device wireguard3 entered promiscuous mode
[ 2489.597390][T30946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:22:25 executing program 4:
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1000, &(0x7f00000005c0)=ANY=[@ANYRES8], 0x0, 0x42e, &(0x7f0000000900)="$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")
unshare(0x26020400)
ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x6, 0x7f})
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080), 0x4)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0), 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
creat(&(0x7f0000000280)='./bus\x00', 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fadvise64(r2, 0x232, 0xdce, 0x4)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={<r3=>0x0, @local, @local}, &(0x7f0000000580)=0xffffff99)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000400)={@private0, 0x5, r3})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, <r4=>0x0}, 0x8)
r5 = socket$igmp6(0xa, 0x3, 0x2)
connect$unix(0xffffffffffffffff, &(0x7f0000000640)=@file={0x1, './file0\x00'}, 0x6e)
setsockopt$inet6_buf(r5, 0x29, 0x30, &(0x7f0000000000)="958ee319f19b00719b576755e6001546c8cec24c332255c78fceae88ca23a41d22951a1a3dfca7266687d20e5064e2a5faf7bb38c1138d940b1d20c2b2726826fb693b163c848a751c7ce34f39ecaebcc9b99afbe66da1ca1a55fdba8137549e4150efc6a077bdda545ccac2a12d00d3f259dbc007bded134946501cda3f", 0x7e)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r4}, 0x80)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
dup2(0xffffffffffffffff, r6)
openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x402c0, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0x0, 0x80000000, 0x30}, 0xc)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000500), 0x4800, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000540)={[0x671d]}, 0x8, 0x80000)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x0)

[ 2489.682959][T30946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:22:25 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {0x1800}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2489.866506][T30957] device wireguard2 entered promiscuous mode
03:22:25 executing program 1:
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1000, &(0x7f00000005c0)=ANY=[@ANYRES8], 0x0, 0x42e, &(0x7f0000000900)="$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")
unshare(0x26020400)
ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x6, 0x7f})
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080), 0x4)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0), 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
creat(&(0x7f0000000280)='./bus\x00', 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fadvise64(r2, 0x232, 0xdce, 0x4)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={<r3=>0x0, @local, @local}, &(0x7f0000000580)=0xffffff99)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000400)={@private0, 0x5, r3})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, <r4=>0x0}, 0x8)
r5 = socket$igmp6(0xa, 0x3, 0x2)
connect$unix(0xffffffffffffffff, &(0x7f0000000640)=@file={0x1, './file0\x00'}, 0x6e)
setsockopt$inet6_buf(r5, 0x29, 0x30, &(0x7f0000000000)="958ee319f19b00719b576755e6001546c8cec24c332255c78fceae88ca23a41d22951a1a3dfca7266687d20e5064e2a5faf7bb38c1138d940b1d20c2b2726826fb693b163c848a751c7ce34f39ecaebcc9b99afbe66da1ca1a55fdba8137549e4150efc6a077bdda545ccac2a12d00d3f259dbc007bded134946501cda3f", 0x7e)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r4}, 0x80)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
dup2(0xffffffffffffffff, r6)
openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x402c0, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0x0, 0x80000000, 0x30}, 0xc)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000500), 0x4800, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000540)={[0x671d]}, 0x8, 0x80000)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x0)

03:22:25 executing program 2:
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1000, &(0x7f00000005c0)=ANY=[@ANYRES8], 0x0, 0x42e, &(0x7f0000000900)="$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")
unshare(0x26020400)
ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x6, 0x7f})
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080), 0x4)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0), 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
creat(&(0x7f0000000280)='./bus\x00', 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fadvise64(r2, 0x232, 0xdce, 0x4)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={<r3=>0x0, @local, @local}, &(0x7f0000000580)=0xffffff99)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000400)={@private0, 0x5, r3})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, <r4=>0x0}, 0x8)
r5 = socket$igmp6(0xa, 0x3, 0x2)
connect$unix(0xffffffffffffffff, &(0x7f0000000640)=@file={0x1, './file0\x00'}, 0x6e)
setsockopt$inet6_buf(r5, 0x29, 0x30, &(0x7f0000000000)="958ee319f19b00719b576755e6001546c8cec24c332255c78fceae88ca23a41d22951a1a3dfca7266687d20e5064e2a5faf7bb38c1138d940b1d20c2b2726826fb693b163c848a751c7ce34f39ecaebcc9b99afbe66da1ca1a55fdba8137549e4150efc6a077bdda545ccac2a12d00d3f259dbc007bded134946501cda3f", 0x7e)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r4}, 0x80)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
dup2(0xffffffffffffffff, r6)
openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x402c0, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0x0, 0x80000000, 0x30}, 0xc)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000500), 0x4800, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000540)={[0x671d]}, 0x8, 0x80000)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x0)

03:22:25 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x10}, [@ldst={0x6, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48)

03:22:25 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x20000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2490.055819][T30963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:22:25 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x10}, [@ldst={0x6, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48)

[ 2490.144552][T30968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2490.209195][T30973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2490.236420][T30963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2490.254328][T21395] Bluetooth: hci4: command 0x040f tx timeout
03:22:25 executing program 4:
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1000, &(0x7f00000005c0)=ANY=[@ANYRES8], 0x0, 0x42e, &(0x7f0000000900)="$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")
unshare(0x26020400)
ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x6, 0x7f})
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080), 0x4)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0), 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
creat(&(0x7f0000000280)='./bus\x00', 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fadvise64(r2, 0x232, 0xdce, 0x4)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={<r3=>0x0, @local, @local}, &(0x7f0000000580)=0xffffff99)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000400)={@private0, 0x5, r3})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, <r4=>0x0}, 0x8)
r5 = socket$igmp6(0xa, 0x3, 0x2)
connect$unix(0xffffffffffffffff, &(0x7f0000000640)=@file={0x1, './file0\x00'}, 0x6e)
setsockopt$inet6_buf(r5, 0x29, 0x30, &(0x7f0000000000)="958ee319f19b00719b576755e6001546c8cec24c332255c78fceae88ca23a41d22951a1a3dfca7266687d20e5064e2a5faf7bb38c1138d940b1d20c2b2726826fb693b163c848a751c7ce34f39ecaebcc9b99afbe66da1ca1a55fdba8137549e4150efc6a077bdda545ccac2a12d00d3f259dbc007bded134946501cda3f", 0x7e)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r4}, 0x80)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
dup2(0xffffffffffffffff, r6)
openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x402c0, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0x0, 0x80000000, 0x30}, 0xc)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000500), 0x4800, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000540)={[0x671d]}, 0x8, 0x80000)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x0)

[ 2490.301074][T30972] device wireguard0 entered promiscuous mode
[ 2490.313871][T30973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:22:25 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x10}, [@ldst={0x6, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48)

03:22:25 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0xa2)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@cgroup=r3, 0xffffffffffffffff, 0xb}, 0x10)
writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4)
r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r6 = dup(0xffffffffffffffff)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000005140)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095f50c21459f792d428f2f8124f7a274eaeefe63f4f44248e8ab7c00d39adb83ccbda01534a5f7f745d73a13cdcbbb670a223d4c3842286f64cb2c5bc1d254e3d9e1dc60368da560ff94c61f7fe17b2f4855c3b3d43e2f20f9208fae6bac5d851abf420b1da18d5dc30c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10)
ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000480)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000600)=""/7, 0x7}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/8, 0x8}, 0x2}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000680)=""/114, 0x72}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001740)=""/64, 0x40}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x4, &(0x7f00000027c0)=""/37, 0x25}, 0x5b}, {{&(0x7f0000002800)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000002880)=""/202, 0xca}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/93, 0x5d}, {&(0x7f0000003a00)=""/127, 0x7f}, {&(0x7f0000003a80)=""/88, 0x58}, {&(0x7f0000003b00)=""/144, 0x90}], 0x6, &(0x7f0000003c40)=""/165, 0xa5}, 0x4}, {{&(0x7f0000003d00), 0x80, &(0x7f0000004e80)=[{&(0x7f0000003d80)=""/225, 0xe1}, {&(0x7f0000003e80)=""/4096, 0x1000}], 0x2, &(0x7f0000004ec0)=""/129, 0x81}, 0x8}], 0x5, 0x1, &(0x7f00000050c0)={0x0, 0x989680})
r8 = open(&(0x7f0000000080)='./bus\x00', 0x6fe44da62996b272, 0x0)
fdatasync(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000005100)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r8, r4, 0x0, 0x80000041)

[ 2490.386509][T30973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:22:26 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x10}, [@ldst={0x6, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48)

03:22:26 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {0x1916}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:22:26 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x40000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2491.222606][T30983] device wireguard2 entered promiscuous mode
03:22:26 executing program 2:
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1000, &(0x7f00000005c0)=ANY=[@ANYRES8], 0x0, 0x42e, &(0x7f0000000900)="$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")
unshare(0x26020400)
ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x6, 0x7f})
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080), 0x4)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0), 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
creat(&(0x7f0000000280)='./bus\x00', 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fadvise64(r2, 0x232, 0xdce, 0x4)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={<r3=>0x0, @local, @local}, &(0x7f0000000580)=0xffffff99)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000400)={@private0, 0x5, r3})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, <r4=>0x0}, 0x8)
r5 = socket$igmp6(0xa, 0x3, 0x2)
connect$unix(0xffffffffffffffff, &(0x7f0000000640)=@file={0x1, './file0\x00'}, 0x6e)
setsockopt$inet6_buf(r5, 0x29, 0x30, &(0x7f0000000000)="958ee319f19b00719b576755e6001546c8cec24c332255c78fceae88ca23a41d22951a1a3dfca7266687d20e5064e2a5faf7bb38c1138d940b1d20c2b2726826fb693b163c848a751c7ce34f39ecaebcc9b99afbe66da1ca1a55fdba8137549e4150efc6a077bdda545ccac2a12d00d3f259dbc007bded134946501cda3f", 0x7e)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r4}, 0x80)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
dup2(0xffffffffffffffff, r6)
openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x402c0, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0x0, 0x80000000, 0x30}, 0xc)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000500), 0x4800, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000540)={[0x671d]}, 0x8, 0x80000)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x0)

03:22:27 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0)
sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}}, 0x0)

[ 2491.561807][T31001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2491.576080][T31003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:22:27 executing program 0:
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="2512e344d0f2963656c0a2788427ed82ef377cd813d3cafa287510d3a22fd437803100034761d72b5cd32ee15efd1a5f34b1836f290091f0f7d6e1e4bb1c65ec429c9e2bbb0e8f056eb69603ba23f1f0f53dab464f12d13f7ddebcfa52a59ee42c2b831ef824a5a9ab485d80d82e4892981b694afc4c1e45392b499d94bc84aaaad7b3b2ca4a7272bdf5988d4f133a1f59f5ae5dc7a2b56e48cf8e00b09cf3c28649582f29e2e8f74992d85a8a8a2a80af12d440835dc615fa7cb5ae9753c29edb1db90ba8149c29dd12c4e757ee1f59fd9c90ee7b0eac2cbc", 0xd9}], 0x1}}], 0x1, 0x0)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket(0x200000100000011, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000100)='m', 0x42, 0x0, &(0x7f0000000200)={0x2f, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)

[ 2491.683351][T31003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2491.695809][T31001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2491.744684][T31002] device wireguard0 entered promiscuous mode
[ 2491.783587][T31003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2491.795513][T31007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:22:27 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = open_tree(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x81901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
creat(&(0x7f0000000080)='./file0/file0\x00', 0x0)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)={0x93, 0x7c, 0x100000}, 0x20)

03:22:27 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0xa2)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@cgroup=r3, 0xffffffffffffffff, 0xb}, 0x10)
writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4)
r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r6 = dup(0xffffffffffffffff)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000005140)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095f50c21459f792d428f2f8124f7a274eaeefe63f4f44248e8ab7c00d39adb83ccbda01534a5f7f745d73a13cdcbbb670a223d4c3842286f64cb2c5bc1d254e3d9e1dc60368da560ff94c61f7fe17b2f4855c3b3d43e2f20f9208fae6bac5d851abf420b1da18d5dc30c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10)
ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000480)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000600)=""/7, 0x7}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/8, 0x8}, 0x2}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000680)=""/114, 0x72}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001740)=""/64, 0x40}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x4, &(0x7f00000027c0)=""/37, 0x25}, 0x5b}, {{&(0x7f0000002800)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000002880)=""/202, 0xca}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/93, 0x5d}, {&(0x7f0000003a00)=""/127, 0x7f}, {&(0x7f0000003a80)=""/88, 0x58}, {&(0x7f0000003b00)=""/144, 0x90}], 0x6, &(0x7f0000003c40)=""/165, 0xa5}, 0x4}, {{&(0x7f0000003d00), 0x80, &(0x7f0000004e80)=[{&(0x7f0000003d80)=""/225, 0xe1}, {&(0x7f0000003e80)=""/4096, 0x1000}], 0x2, &(0x7f0000004ec0)=""/129, 0x81}, 0x8}], 0x5, 0x1, &(0x7f00000050c0)={0x0, 0x989680})
r8 = open(&(0x7f0000000080)='./bus\x00', 0x6fe44da62996b272, 0x0)
fdatasync(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000005100)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r8, r4, 0x0, 0x80000041)

03:22:27 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = open_tree(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x81901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
creat(&(0x7f0000000080)='./file0/file0\x00', 0x0)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)={0x93, 0x7c, 0x100000}, 0x20)

[ 2492.334678][T21395] Bluetooth: hci4: command 0x0419 tx timeout
03:22:28 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x60000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:22:28 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {0x2000}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:22:28 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = open_tree(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x81901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
creat(&(0x7f0000000080)='./file0/file0\x00', 0x0)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)={0x93, 0x7c, 0x100000}, 0x20)

03:22:28 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0xa2)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@cgroup=r3, 0xffffffffffffffff, 0xb}, 0x10)
writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4)
r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r6 = dup(0xffffffffffffffff)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000005140)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095f50c21459f792d428f2f8124f7a274eaeefe63f4f44248e8ab7c00d39adb83ccbda01534a5f7f745d73a13cdcbbb670a223d4c3842286f64cb2c5bc1d254e3d9e1dc60368da560ff94c61f7fe17b2f4855c3b3d43e2f20f9208fae6bac5d851abf420b1da18d5dc30c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10)
ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000480)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000600)=""/7, 0x7}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/8, 0x8}, 0x2}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000680)=""/114, 0x72}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001740)=""/64, 0x40}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x4, &(0x7f00000027c0)=""/37, 0x25}, 0x5b}, {{&(0x7f0000002800)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000002880)=""/202, 0xca}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/93, 0x5d}, {&(0x7f0000003a00)=""/127, 0x7f}, {&(0x7f0000003a80)=""/88, 0x58}, {&(0x7f0000003b00)=""/144, 0x90}], 0x6, &(0x7f0000003c40)=""/165, 0xa5}, 0x4}, {{&(0x7f0000003d00), 0x80, &(0x7f0000004e80)=[{&(0x7f0000003d80)=""/225, 0xe1}, {&(0x7f0000003e80)=""/4096, 0x1000}], 0x2, &(0x7f0000004ec0)=""/129, 0x81}, 0x8}], 0x5, 0x1, &(0x7f00000050c0)={0x0, 0x989680})
r8 = open(&(0x7f0000000080)='./bus\x00', 0x6fe44da62996b272, 0x0)
fdatasync(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000005100)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r8, r4, 0x0, 0x80000041)

[ 2493.120028][T31028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2493.136074][T31027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:22:29 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0xa2)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@cgroup=r3, 0xffffffffffffffff, 0xb}, 0x10)
writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4)
r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r6 = dup(0xffffffffffffffff)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000005140)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095f50c21459f792d428f2f8124f7a274eaeefe63f4f44248e8ab7c00d39adb83ccbda01534a5f7f745d73a13cdcbbb670a223d4c3842286f64cb2c5bc1d254e3d9e1dc60368da560ff94c61f7fe17b2f4855c3b3d43e2f20f9208fae6bac5d851abf420b1da18d5dc30c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10)
ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000480)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000600)=""/7, 0x7}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/8, 0x8}, 0x2}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000680)=""/114, 0x72}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001740)=""/64, 0x40}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x4, &(0x7f00000027c0)=""/37, 0x25}, 0x5b}, {{&(0x7f0000002800)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000002880)=""/202, 0xca}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/93, 0x5d}, {&(0x7f0000003a00)=""/127, 0x7f}, {&(0x7f0000003a80)=""/88, 0x58}, {&(0x7f0000003b00)=""/144, 0x90}], 0x6, &(0x7f0000003c40)=""/165, 0xa5}, 0x4}, {{&(0x7f0000003d00), 0x80, &(0x7f0000004e80)=[{&(0x7f0000003d80)=""/225, 0xe1}, {&(0x7f0000003e80)=""/4096, 0x1000}], 0x2, &(0x7f0000004ec0)=""/129, 0x81}, 0x8}], 0x5, 0x1, &(0x7f00000050c0)={0x0, 0x989680})
r8 = open(&(0x7f0000000080)='./bus\x00', 0x6fe44da62996b272, 0x0)
fdatasync(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000005100)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r8, r4, 0x0, 0x80000041)

03:22:29 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = open_tree(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x81901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
creat(&(0x7f0000000080)='./file0/file0\x00', 0x0)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)={0x93, 0x7c, 0x100000}, 0x20)

[ 2493.885756][T31028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2494.048509][T31027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2494.116746][T31028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:22:31 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0xa2)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@cgroup=r3, 0xffffffffffffffff, 0xb}, 0x10)
writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4)
r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r6 = dup(0xffffffffffffffff)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000005140)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095f50c21459f792d428f2f8124f7a274eaeefe63f4f44248e8ab7c00d39adb83ccbda01534a5f7f745d73a13cdcbbb670a223d4c3842286f64cb2c5bc1d254e3d9e1dc60368da560ff94c61f7fe17b2f4855c3b3d43e2f20f9208fae6bac5d851abf420b1da18d5dc30c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10)
ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000480)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000600)=""/7, 0x7}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/8, 0x8}, 0x2}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000680)=""/114, 0x72}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001740)=""/64, 0x40}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x4, &(0x7f00000027c0)=""/37, 0x25}, 0x5b}, {{&(0x7f0000002800)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000002880)=""/202, 0xca}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/93, 0x5d}, {&(0x7f0000003a00)=""/127, 0x7f}, {&(0x7f0000003a80)=""/88, 0x58}, {&(0x7f0000003b00)=""/144, 0x90}], 0x6, &(0x7f0000003c40)=""/165, 0xa5}, 0x4}, {{&(0x7f0000003d00), 0x80, &(0x7f0000004e80)=[{&(0x7f0000003d80)=""/225, 0xe1}, {&(0x7f0000003e80)=""/4096, 0x1000}], 0x2, &(0x7f0000004ec0)=""/129, 0x81}, 0x8}], 0x5, 0x1, &(0x7f00000050c0)={0x0, 0x989680})
r8 = open(&(0x7f0000000080)='./bus\x00', 0x6fe44da62996b272, 0x0)
fdatasync(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000005100)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r8, r4, 0x0, 0x80000041)

03:22:31 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0xa2)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@cgroup=r3, 0xffffffffffffffff, 0xb}, 0x10)
writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4)
r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r6 = dup(0xffffffffffffffff)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000005140)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095f50c21459f792d428f2f8124f7a274eaeefe63f4f44248e8ab7c00d39adb83ccbda01534a5f7f745d73a13cdcbbb670a223d4c3842286f64cb2c5bc1d254e3d9e1dc60368da560ff94c61f7fe17b2f4855c3b3d43e2f20f9208fae6bac5d851abf420b1da18d5dc30c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10)
ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000480)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000600)=""/7, 0x7}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/8, 0x8}, 0x2}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000680)=""/114, 0x72}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001740)=""/64, 0x40}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x4, &(0x7f00000027c0)=""/37, 0x25}, 0x5b}, {{&(0x7f0000002800)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000002880)=""/202, 0xca}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/93, 0x5d}, {&(0x7f0000003a00)=""/127, 0x7f}, {&(0x7f0000003a80)=""/88, 0x58}, {&(0x7f0000003b00)=""/144, 0x90}], 0x6, &(0x7f0000003c40)=""/165, 0xa5}, 0x4}, {{&(0x7f0000003d00), 0x80, &(0x7f0000004e80)=[{&(0x7f0000003d80)=""/225, 0xe1}, {&(0x7f0000003e80)=""/4096, 0x1000}], 0x2, &(0x7f0000004ec0)=""/129, 0x81}, 0x8}], 0x5, 0x1, &(0x7f00000050c0)={0x0, 0x989680})
r8 = open(&(0x7f0000000080)='./bus\x00', 0x6fe44da62996b272, 0x0)
fdatasync(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000005100)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r8, r4, 0x0, 0x80000041)

03:22:31 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000002400e577a885ddb05cc582f24186cf0d", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r5, @ANYBLOB="0080000000800000f2ff00000800010075333200c0010200bc01010004000200b40105510004d72000000807000000ff03"], 0x1ec}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x11, 0x800000003, 0x0)
bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r8, @ANYBLOB="04"], 0x1ec}}, 0x0)

03:22:31 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0xa2)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@cgroup=r3, 0xffffffffffffffff, 0xb}, 0x10)
writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4)
r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r6 = dup(0xffffffffffffffff)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000005140)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095f50c21459f792d428f2f8124f7a274eaeefe63f4f44248e8ab7c00d39adb83ccbda01534a5f7f745d73a13cdcbbb670a223d4c3842286f64cb2c5bc1d254e3d9e1dc60368da560ff94c61f7fe17b2f4855c3b3d43e2f20f9208fae6bac5d851abf420b1da18d5dc30c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10)
ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000480)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000600)=""/7, 0x7}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/8, 0x8}, 0x2}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000680)=""/114, 0x72}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001740)=""/64, 0x40}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x4, &(0x7f00000027c0)=""/37, 0x25}, 0x5b}, {{&(0x7f0000002800)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000002880)=""/202, 0xca}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/93, 0x5d}, {&(0x7f0000003a00)=""/127, 0x7f}, {&(0x7f0000003a80)=""/88, 0x58}, {&(0x7f0000003b00)=""/144, 0x90}], 0x6, &(0x7f0000003c40)=""/165, 0xa5}, 0x4}, {{&(0x7f0000003d00), 0x80, &(0x7f0000004e80)=[{&(0x7f0000003d80)=""/225, 0xe1}, {&(0x7f0000003e80)=""/4096, 0x1000}], 0x2, &(0x7f0000004ec0)=""/129, 0x81}, 0x8}], 0x5, 0x1, &(0x7f00000050c0)={0x0, 0x989680})
r8 = open(&(0x7f0000000080)='./bus\x00', 0x6fe44da62996b272, 0x0)
fdatasync(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000005100)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r8, r4, 0x0, 0x80000041)

03:22:31 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x88000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2495.757381][T31057] wlan1: authenticate with 08:02:11:00:00:00
[ 2504.267870][T31057] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
03:22:39 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0xa2)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@cgroup=r3, 0xffffffffffffffff, 0xb}, 0x10)
writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4)
r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r6 = dup(0xffffffffffffffff)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000005140)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095f50c21459f792d428f2f8124f7a274eaeefe63f4f44248e8ab7c00d39adb83ccbda01534a5f7f745d73a13cdcbbb670a223d4c3842286f64cb2c5bc1d254e3d9e1dc60368da560ff94c61f7fe17b2f4855c3b3d43e2f20f9208fae6bac5d851abf420b1da18d5dc30c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10)
ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000480)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000600)=""/7, 0x7}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/8, 0x8}, 0x2}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000680)=""/114, 0x72}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001740)=""/64, 0x40}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x4, &(0x7f00000027c0)=""/37, 0x25}, 0x5b}, {{&(0x7f0000002800)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000002880)=""/202, 0xca}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/93, 0x5d}, {&(0x7f0000003a00)=""/127, 0x7f}, {&(0x7f0000003a80)=""/88, 0x58}, {&(0x7f0000003b00)=""/144, 0x90}], 0x6, &(0x7f0000003c40)=""/165, 0xa5}, 0x4}, {{&(0x7f0000003d00), 0x80, &(0x7f0000004e80)=[{&(0x7f0000003d80)=""/225, 0xe1}, {&(0x7f0000003e80)=""/4096, 0x1000}], 0x2, &(0x7f0000004ec0)=""/129, 0x81}, 0x8}], 0x5, 0x1, &(0x7f00000050c0)={0x0, 0x989680})
r8 = open(&(0x7f0000000080)='./bus\x00', 0x6fe44da62996b272, 0x0)
fdatasync(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000005100)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r8, r4, 0x0, 0x80000041)

03:22:39 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0xa2)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@cgroup=r3, 0xffffffffffffffff, 0xb}, 0x10)
writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4)
r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r6 = dup(0xffffffffffffffff)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000005140)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095f50c21459f792d428f2f8124f7a274eaeefe63f4f44248e8ab7c00d39adb83ccbda01534a5f7f745d73a13cdcbbb670a223d4c3842286f64cb2c5bc1d254e3d9e1dc60368da560ff94c61f7fe17b2f4855c3b3d43e2f20f9208fae6bac5d851abf420b1da18d5dc30c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10)
ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000480)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000600)=""/7, 0x7}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/8, 0x8}, 0x2}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000680)=""/114, 0x72}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001740)=""/64, 0x40}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x4, &(0x7f00000027c0)=""/37, 0x25}, 0x5b}, {{&(0x7f0000002800)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000002880)=""/202, 0xca}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/93, 0x5d}, {&(0x7f0000003a00)=""/127, 0x7f}, {&(0x7f0000003a80)=""/88, 0x58}, {&(0x7f0000003b00)=""/144, 0x90}], 0x6, &(0x7f0000003c40)=""/165, 0xa5}, 0x4}, {{&(0x7f0000003d00), 0x80, &(0x7f0000004e80)=[{&(0x7f0000003d80)=""/225, 0xe1}, {&(0x7f0000003e80)=""/4096, 0x1000}], 0x2, &(0x7f0000004ec0)=""/129, 0x81}, 0x8}], 0x5, 0x1, &(0x7f00000050c0)={0x0, 0x989680})
r8 = open(&(0x7f0000000080)='./bus\x00', 0x6fe44da62996b272, 0x0)
fdatasync(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000005100)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r8, r4, 0x0, 0x80000041)

[ 2504.475508][T31067] HTB: quantum of class 803D8000 is big. Consider r2q change.
[ 2504.484524][T30294] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[ 2507.356354][T30309] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[ 2507.554296][T30309] wlan1: authentication with 08:02:11:00:00:00 timed out
[ 2507.891135][T30460] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2508.125009][T31067] HTB: quantum of class 803D8004 is big. Consider r2q change.
[ 2508.220729][T30460] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2508.375381][T30460] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2508.525245][T30460] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2509.567021][T30460] device hsr_slave_0 left promiscuous mode
[ 2509.573696][T30460] device hsr_slave_1 left promiscuous mode
[ 2509.582318][T30460] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2509.596989][T30460] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2509.606945][T30460] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2509.614848][T30460] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2509.624568][T30460] device bridge_slave_1 left promiscuous mode
[ 2509.630854][T30460] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2509.640627][T30460] device bridge_slave_0 left promiscuous mode
[ 2509.649511][T30460] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2509.682938][T30460] device veth1_macvtap left promiscuous mode
[ 2509.693747][T30460] device veth0_macvtap left promiscuous mode
[ 2509.711146][T30460] device veth1_vlan left promiscuous mode
[ 2509.721129][T30460] device veth0_vlan left promiscuous mode
[ 2510.258255][T30460] team0 (unregistering): Port device team_slave_1 removed
[ 2510.280091][T30460] team0 (unregistering): Port device team_slave_0 removed
[ 2510.299951][T30460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2510.336313][T30460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2510.369599][ T3580] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 2510.385462][ T3580] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 2510.395645][ T3580] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 2510.405146][ T3580] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 2510.412856][ T3580] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 2510.420854][T16923] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 2510.500634][T30460] bond0 (unregistering): Released all slaves
[ 2510.882425][T31107] chnl_net:caif_netlink_parms(): no params data found
[ 2510.989052][T31107] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2511.021213][T31107] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2511.030173][T31107] device bridge_slave_0 entered promiscuous mode
[ 2511.055117][T31107] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2511.062347][T31107] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2511.071227][T31107] device bridge_slave_1 entered promiscuous mode
[ 2511.145336][T31107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2511.193436][T31107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2511.312727][T31107] team0: Port device team_slave_0 added
[ 2511.356025][T31107] team0: Port device team_slave_1 added
[ 2511.432337][T31107] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2511.454274][T31107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2511.514303][T31107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2511.547538][T31107] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2511.555624][T31107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2511.584229][T31107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2511.733871][T31107] device hsr_slave_0 entered promiscuous mode
[ 2511.742249][T31107] device hsr_slave_1 entered promiscuous mode
[ 2511.750567][T31107] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2511.759374][T31107] Cannot create hsr debugfs directory
[ 2512.494393][T21395] Bluetooth: hci5: command 0x0409 tx timeout
[ 2513.005001][T31107] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2513.028187][T31107] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2513.073093][T31107] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2513.091284][T31107] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2513.253961][T31107] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2513.292642][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2513.315054][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2513.328571][T31107] 8021q: adding VLAN 0 to HW filter on device team0
[ 2513.357200][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2513.367129][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2513.381206][T29724] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2513.388411][T29724] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2513.409557][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2513.418354][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2513.427898][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2513.436875][ T4448] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2513.443983][ T4448] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2513.452944][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2513.487844][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2513.502311][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2513.521257][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2513.532541][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2513.550392][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2513.560908][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2513.576821][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2513.601975][T31107] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2513.655131][T31107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2513.667425][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2513.681428][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2513.691998][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2514.137211][T19430] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2514.146717][T19430] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2514.172898][T31107] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2514.574355][T21395] Bluetooth: hci5: command 0x041b tx timeout
[ 2514.759200][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2514.770805][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2514.803534][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2514.820076][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2514.839423][T31107] device veth0_vlan entered promiscuous mode
[ 2514.872685][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2514.888538][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2514.907630][T31107] device veth1_vlan entered promiscuous mode
[ 2514.939805][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2514.949314][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2514.962693][T31107] device veth0_macvtap entered promiscuous mode
[ 2514.982194][T31107] device veth1_macvtap entered promiscuous mode
[ 2515.011753][T31107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2515.029939][T31107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2515.041788][T31107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2515.064577][T31107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2515.082192][T31107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2515.103112][T31107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2515.122967][T31107] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2515.131568][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2515.153116][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2515.162054][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2515.178495][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2515.193686][T31107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2515.220711][T31107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2515.237909][T31107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2515.251336][T31107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2515.268867][T31107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2515.282641][T31107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2515.301748][T31107] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2515.320310][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2515.331813][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2515.351584][T31107] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2515.373223][T31107] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2515.382913][T31107] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2515.399301][T31107] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2515.533866][T30309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2515.554678][T30309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2515.609889][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2515.631493][T30309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2515.641700][T30309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2515.659905][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2515.787330][T31208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2515.831557][T19430] wlan1: authenticate with 08:02:11:00:00:00
[ 2515.854832][T19430] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2515.873329][T30309] wlan1: authenticated
[ 2515.873855][T31208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2515.878243][T21994] mac80211_hwsim hwsim83 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
[ 2515.905080][T30309] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[ 2515.951939][T31208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2515.956624][T30309] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[ 2515.981454][T30309] wlan1: associated
03:22:51 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {0x2100}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:22:51 executing program 1:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
socket$inet_udplite(0x2, 0x2, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$udf(&(0x7f0000000c00), &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="000d4bb72c5e1cda0e94577ab5fc264780b84b20b4694104e0fd15f2673b4d0332dc86548e07341a4ef12a1285f6cb7c84d447f58d382776e8351e0e0380b3b0ec4b1c4128124286af3dc702af20e3ef"], 0x1, 0xbee, &(0x7f0000000cc0)="$eJzs3UFsHNd5B/DvDUmRkotk61iykxrB2gUcVWlUkootGwxQq2aJplFs1hSTtu7BK3GlbkUtFyTlyEabuCcfWqBsCvTSFChQpDB6CNhDDu0pBQr0ShS5FQXUNHVdFAX2ECOXwixm9i25kmiLMEVRkn8/QPoPZ7+3O/Peema4b8cKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACDiV371zPhEOuitAADuphfnXh6fdP4HgI+Vc37/BwAAAAAAAAAAAACAe12KIt6NFN94vJterX7uGTvbal+9Nj89s3Ozw6lqOVTVl3/GJiZPffHpZ04/288Pb3+nfTpemjt3pv7C0pXOcnNlpblQn2+3LiwtNHf9DHttf7MTVQfUr1y+unDx4kp98uSpGx6+Vntn9KFjtanTE68c7dfOT8/MzA3UDI985Fe/xQfd4XEoirgYKS6//W5qREQRe++L27x39tvhaidOVDsxPz1T7chiq9FeLR+c7XdEEVEbaPR8v4/uwljsST3izXLzyw0+Ue7eXKex3Di/2KzPNpZXW6utpfZs6m1tqsqLeDZFdCKiO3rr041EEd+MFG99p5vOR8RQvx8+X90YfPvtKfZhH3dhOCJqIxEbxX0wZvew0Sjie5Hi298ajwu5X6tueyriq2Uei7ha5vWItTI/G5HKN8gjEe/t8H7i/jIcRfxRpPjJVDct9Me+Oq6c/Vr9y+2LSwO1/ePKfX9+uJvu8WPTWBTRqI743fTRL3YAAAAAALj3FPGnkeKJHx5PnRicU2y1L9XPNc4v9j4V7n/2X8+tNjc3N2upl+M5Z3N2cq7lXM+5kbObs1bk9jlnc3ZyruVcz7mRs5uzNpTb55zN2cm5lnM950bObs7acG6fczZnJ+dazvWcGzm7wwc4XAAAAAAAAACwg8NRxNcjxVO/9Fp1X3FU96V/cur0yyd/ffCe8cdu8zxl7cmIWC92d0/uoXzr8GyaTemA7iGmd//fH+T7//7woDcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4UEUU8WSkeO373RQpIuoRr0Yvr48e9NYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB3wlgq4r1I8edfGat+3igifjsi3t98fzMirr+/eacd9B4DAAAAAAAAwAMoFfF6pHjy5W6qRcS12jujDx2rTZ2eeOXoUAxFKksG61+aO3em/sLSlc5yc2WluVCfb7cuLC00d/tyY2db7avX5qdn9mVnbuvwPm//4bEXljqvL7cu/e7qjo8fGTtzfmV1uXFh54fjcBQR9cE1J6oNnp+eqTZ6sdVoV01n0263GAAAAAAAAICPg5FUxPuR4q2/eXtr3nm4N+c/fHPtd78UUeTl6Tz/vDUNXX1v4BPV9wZ6y5+cOv0bk58ZXN5xyvpENaFen5+emZkbWD08cmvpWH7d8b3tMgPK8V+NFH/8l/X0RF534/gPbdV+9/e3x/vNm5/oA8Z8r+P/swPrytdMqYi/ixQ/95uPxRPVdh6JW74zkeu+Eil+a/3xXBeHyron8+MPV3+PXWwtNsfL2muR4h+v3lj7VK791HbtxK479j5Rjv+TkeJ/fmd9q2/y+OcR2B61wfH/zM3vjn0a/4cH1tXy6/78ndl1ImLl9TcuNxYXm8sWLFiwsLVw0Ecm7oby/P/1SPEPf/avW9c7+fz/M72ftq//fvrN7fP/1M1PtE/n/08NrJvKVyMjwxFjq1c6I49GjK28/sYXWlcal5qXmu1Tp597ZnL8uYnxUyOH+hd320t77qsHUTn+vxcpvvejv43P5XU3Xv/tfP1/5OYn2qfxf2Rg3ZEbrlf2vOvk8f+/SPHP0z+I43ndh13/93//P54vwreuz/dp/I8OrKt+x/tExC8MrDt+NOKB+6UMAAAA7rCUivhBnk8dv8186j9Fijf++xdzXTpW1j2fH69Vf4+9uNT+wpnFxaULjdXG+cVmfa7TuNAs2/44UnT/+vHctqjmV/vzzb053u252H+JFM/9Wr+2Nxfb/2zqke3aibL2ZKT4kxdvrO1/jnF0u3ayrP23SDHxys61x7ZrT5W1/xUpfvoX9X7tkbL2S7n20e3akxeWFhf2YVgAAAAAAGBPRlIRz0SKvz81nPqfb+/m+5+3fOi9T9//e3Rg3cJdul9lz50KAPe48vx/vDyr//Jfbc3l33j+3/7/AAye/282+O8GfNDyRzn/1+7MbgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB87KQoYilSfOPxbro+Wv7cM3a21b56bX56Zudmh1PVcqiqL/+MTUye+uLTz5x+tp8f3v5O+3S8NHfuTP2FpSud5ebKSnOhPt9uXVhaaO76Gfba/mYnqg6oX7l8deHixZX65MlTNzx8rfbO6EPHalOnJ1452q+dn56ZmRuoGR75yK9+i/QB6w9FEf8bKS6//W7699GIIvbeF7d57+y3w9VOnKh2Yn56ptqRxVajvVo+ONvviCKiNtDo+X4f3YWx2JN6xJvl5pcbfKLcvblOY7lxfrFZn20sr7ZWW0vt2dTb2lSVF/FsiuhERHf01qcbiSJGIsVb3+mmH41GDPX74fMvzr08Pnn77Sn2YR93YTgiaiMRG8V9MGb3sNEo4ulI8e1vjcd/jPb6teq2pyK+WuaxiKtlXo9YK/OzEal8gzwS8d4O7yfuL8NRxMOR4idT3fTj0Tz21XHl7NfqX25fXBqo7R9X7vvzw910jx+bxqKId6sjfjf9p/+eAQAAAAAeIEU8Fime+OHxVM0Pbs0pttqX6uca5xd7H+v3P/uv51abm5ubtdTL8ZyzOTs513Ku59zI2c1ZK3L7nLM5OznXcq7n3MjZzVkbyu1zzubs5FzLuZ5zI2c3Z204t885m7OTcy3nes6NnN3hgxwvAAAAAAAAgJ0VUcTnIsVr3++mzdHeBO+r0cvr7gd64P1/AAAA//9W5Vt6")
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x1c3c42, 0x0)
write(0xffffffffffffffff, &(0x7f0000004200)="74efc4c419fdb8d66b12a7bbf371d056ad6f01e9762d70401d1c9d331b48b925e9e6a7759abb206b9b18bfc3f3f96adb2b37c2121ef21e91bac768dd33df29649da1d82e826a55c4d620b6f502daee26004b741c951d528d806efbe00c439f2df46d3adf8be24e280b948a49afd17d56437c6e752d84f99bf37a88f0c54488dd13b848f2381d7d2aecb68ed16762e4a3c1a847565364b9f1af92c9c89e06e89fe6179cb7078a742cb968a9f09cc690dc473df29d6ad9af5879e9a2618c63702117a3a63d3a4236baee86f5f452e9663a795306dabb97db884348ab437bdc13b7cfb03eff1cf216f0", 0xe8)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0xef)
write$cgroup_type(r5, &(0x7f0000000200), 0x175d900f)
getegid()
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x91, &(0x7f00000008c0)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x127b, 0x0)

03:22:51 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x888effff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:22:51 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = gettid()
sched_setaffinity(r3, 0x8, &(0x7f0000002280)=0x2ac)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000100000000000080e1695"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r4}, 0x10)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)}, {&(0x7f00000007c0)}, {&(0x7f0000000800)}], 0x3, &(0x7f0000002780)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRESHEX=r0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00$\x00\x00\x00', @ANYRES32, @ANYRES64, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32], 0x140}, 0x4000001)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lseek(0xffffffffffffffff, 0x100, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000800)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[])
utimes(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000440)={{0x77359400}, {0x77359400}})
mkdir(&(0x7f00000002c0)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000780)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0'])
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/snmp6\x00')

03:22:51 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0xa2)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@cgroup=r3, 0xffffffffffffffff, 0xb}, 0x10)
writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4)
r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r6 = dup(0xffffffffffffffff)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000005140)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095f50c21459f792d428f2f8124f7a274eaeefe63f4f44248e8ab7c00d39adb83ccbda01534a5f7f745d73a13cdcbbb670a223d4c3842286f64cb2c5bc1d254e3d9e1dc60368da560ff94c61f7fe17b2f4855c3b3d43e2f20f9208fae6bac5d851abf420b1da18d5dc30c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10)
ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000480)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000600)=""/7, 0x7}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/8, 0x8}, 0x2}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000680)=""/114, 0x72}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001740)=""/64, 0x40}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x4, &(0x7f00000027c0)=""/37, 0x25}, 0x5b}, {{&(0x7f0000002800)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000002880)=""/202, 0xca}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/93, 0x5d}, {&(0x7f0000003a00)=""/127, 0x7f}, {&(0x7f0000003a80)=""/88, 0x58}, {&(0x7f0000003b00)=""/144, 0x90}], 0x6, &(0x7f0000003c40)=""/165, 0xa5}, 0x4}, {{&(0x7f0000003d00), 0x80, &(0x7f0000004e80)=[{&(0x7f0000003d80)=""/225, 0xe1}, {&(0x7f0000003e80)=""/4096, 0x1000}], 0x2, &(0x7f0000004ec0)=""/129, 0x81}, 0x8}], 0x5, 0x1, &(0x7f00000050c0)={0x0, 0x989680})
r8 = open(&(0x7f0000000080)='./bus\x00', 0x6fe44da62996b272, 0x0)
fdatasync(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000005100)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r8, r4, 0x0, 0x80000041)

03:22:51 executing program 2:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x9b}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x93, &(0x7f0000000180)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

03:22:51 executing program 2:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x9b}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x93, &(0x7f0000000180)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[ 2516.355348][T31227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:22:57 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = gettid()
sched_setaffinity(r3, 0x8, &(0x7f0000002280)=0x2ac)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000100000000000080e1695"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r4}, 0x10)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)}, {&(0x7f00000007c0)}, {&(0x7f0000000800)}], 0x3, &(0x7f0000002780)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRESHEX=r0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00$\x00\x00\x00', @ANYRES32, @ANYRES64, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32], 0x140}, 0x4000001)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lseek(0xffffffffffffffff, 0x100, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000800)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[])
utimes(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000440)={{0x77359400}, {0x77359400}})
mkdir(&(0x7f00000002c0)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000780)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0'])
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/snmp6\x00')

[ 2522.192352][T21395] Bluetooth: hci5: command 0x040f tx timeout
03:22:57 executing program 1:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
socket$inet_udplite(0x2, 0x2, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$udf(&(0x7f0000000c00), &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="000d4bb72c5e1cda0e94577ab5fc264780b84b20b4694104e0fd15f2673b4d0332dc86548e07341a4ef12a1285f6cb7c84d447f58d382776e8351e0e0380b3b0ec4b1c4128124286af3dc702af20e3ef"], 0x1, 0xbee, &(0x7f0000000cc0)="$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")
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x1c3c42, 0x0)
write(0xffffffffffffffff, &(0x7f0000004200)="74efc4c419fdb8d66b12a7bbf371d056ad6f01e9762d70401d1c9d331b48b925e9e6a7759abb206b9b18bfc3f3f96adb2b37c2121ef21e91bac768dd33df29649da1d82e826a55c4d620b6f502daee26004b741c951d528d806efbe00c439f2df46d3adf8be24e280b948a49afd17d56437c6e752d84f99bf37a88f0c54488dd13b848f2381d7d2aecb68ed16762e4a3c1a847565364b9f1af92c9c89e06e89fe6179cb7078a742cb968a9f09cc690dc473df29d6ad9af5879e9a2618c63702117a3a63d3a4236baee86f5f452e9663a795306dabb97db884348ab437bdc13b7cfb03eff1cf216f0", 0xe8)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0xef)
write$cgroup_type(r5, &(0x7f0000000200), 0x175d900f)
getegid()
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x91, &(0x7f00000008c0)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x127b, 0x0)

03:22:57 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {0x2500}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:22:57 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0xa70b0000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:22:58 executing program 0:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
socket$inet_udplite(0x2, 0x2, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$udf(&(0x7f0000000c00), &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="000d4bb72c5e1cda0e94577ab5fc264780b84b20b4694104e0fd15f2673b4d0332dc86548e07341a4ef12a1285f6cb7c84d447f58d382776e8351e0e0380b3b0ec4b1c4128124286af3dc702af20e3ef"], 0x1, 0xbee, &(0x7f0000000cc0)="$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")
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x1c3c42, 0x0)
write(0xffffffffffffffff, &(0x7f0000004200)="74efc4c419fdb8d66b12a7bbf371d056ad6f01e9762d70401d1c9d331b48b925e9e6a7759abb206b9b18bfc3f3f96adb2b37c2121ef21e91bac768dd33df29649da1d82e826a55c4d620b6f502daee26004b741c951d528d806efbe00c439f2df46d3adf8be24e280b948a49afd17d56437c6e752d84f99bf37a88f0c54488dd13b848f2381d7d2aecb68ed16762e4a3c1a847565364b9f1af92c9c89e06e89fe6179cb7078a742cb968a9f09cc690dc473df29d6ad9af5879e9a2618c63702117a3a63d3a4236baee86f5f452e9663a795306dabb97db884348ab437bdc13b7cfb03eff1cf216f0", 0xe8)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0xef)
write$cgroup_type(r5, &(0x7f0000000200), 0x175d900f)
getegid()
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x91, &(0x7f00000008c0)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x127b, 0x0)

03:22:58 executing program 2:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x9b}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x93, &(0x7f0000000180)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[ 2522.600336][T31249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2522.679146][T31253] overlayfs: missing 'lowerdir'
[ 2522.937108][T31248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2522.961090][T31249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2524.314180][T21395] Bluetooth: hci5: command 0x0419 tx timeout
03:23:00 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = gettid()
sched_setaffinity(r3, 0x8, &(0x7f0000002280)=0x2ac)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000100000000000080e1695"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r4}, 0x10)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)}, {&(0x7f00000007c0)}, {&(0x7f0000000800)}], 0x3, &(0x7f0000002780)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRESHEX=r0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00$\x00\x00\x00', @ANYRES32, @ANYRES64, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32], 0x140}, 0x4000001)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lseek(0xffffffffffffffff, 0x100, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000800)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[])
utimes(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000440)={{0x77359400}, {0x77359400}})
mkdir(&(0x7f00000002c0)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000780)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0'])
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/snmp6\x00')

[ 2524.962968][T31256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:23:00 executing program 2:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x9b}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x93, &(0x7f0000000180)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[ 2525.047826][T31249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2525.101416][T31248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:23:01 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0xe7030000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:23:01 executing program 0:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
socket$inet_udplite(0x2, 0x2, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$udf(&(0x7f0000000c00), &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="000d4bb72c5e1cda0e94577ab5fc264780b84b20b4694104e0fd15f2673b4d0332dc86548e07341a4ef12a1285f6cb7c84d447f58d382776e8351e0e0380b3b0ec4b1c4128124286af3dc702af20e3ef"], 0x1, 0xbee, &(0x7f0000000cc0)="$eJzs3UFsHNd5B/DvDUmRkotk61iykxrB2gUcVWlUkootGwxQq2aJplFs1hSTtu7BK3GlbkUtFyTlyEabuCcfWqBsCvTSFChQpDB6CNhDDu0pBQr0ShS5FQXUNHVdFAX2ECOXwixm9i25kmiLMEVRkn8/QPoPZ7+3O/Peema4b8cKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACDiV371zPhEOuitAADuphfnXh6fdP4HgI+Vc37/BwAAAAAAAAAAAACAe12KIt6NFN94vJterX7uGTvbal+9Nj89s3Ozw6lqOVTVl3/GJiZPffHpZ04/288Pb3+nfTpemjt3pv7C0pXOcnNlpblQn2+3LiwtNHf9DHttf7MTVQfUr1y+unDx4kp98uSpGx6+Vntn9KFjtanTE68c7dfOT8/MzA3UDI985Fe/xQfd4XEoirgYKS6//W5qREQRe++L27x39tvhaidOVDsxPz1T7chiq9FeLR+c7XdEEVEbaPR8v4/uwljsST3izXLzyw0+Ue7eXKex3Di/2KzPNpZXW6utpfZs6m1tqsqLeDZFdCKiO3rr041EEd+MFG99p5vOR8RQvx8+X90YfPvtKfZhH3dhOCJqIxEbxX0wZvew0Sjie5Hi298ajwu5X6tueyriq2Uei7ha5vWItTI/G5HKN8gjEe/t8H7i/jIcRfxRpPjJVDct9Me+Oq6c/Vr9y+2LSwO1/ePKfX9+uJvu8WPTWBTRqI743fTRL3YAAAAAALj3FPGnkeKJHx5PnRicU2y1L9XPNc4v9j4V7n/2X8+tNjc3N2upl+M5Z3N2cq7lXM+5kbObs1bk9jlnc3ZyruVcz7mRs5uzNpTb55zN2cm5lnM950bObs7acG6fczZnJ+dazvWcGzm7wwc4XAAAAAAAAACwg8NRxNcjxVO/9Fp1X3FU96V/cur0yyd/ffCe8cdu8zxl7cmIWC92d0/uoXzr8GyaTemA7iGmd//fH+T7//7woDcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4UEUU8WSkeO373RQpIuoRr0Yvr48e9NYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB3wlgq4r1I8edfGat+3igifjsi3t98fzMirr+/eacd9B4DAAAAAAAAwAMoFfF6pHjy5W6qRcS12jujDx2rTZ2eeOXoUAxFKksG61+aO3em/sLSlc5yc2WluVCfb7cuLC00d/tyY2db7avX5qdn9mVnbuvwPm//4bEXljqvL7cu/e7qjo8fGTtzfmV1uXFh54fjcBQR9cE1J6oNnp+eqTZ6sdVoV01n0263GAAAAAAAAICPg5FUxPuR4q2/eXtr3nm4N+c/fHPtd78UUeTl6Tz/vDUNXX1v4BPV9wZ6y5+cOv0bk58ZXN5xyvpENaFen5+emZkbWD08cmvpWH7d8b3tMgPK8V+NFH/8l/X0RF534/gPbdV+9/e3x/vNm5/oA8Z8r+P/swPrytdMqYi/ixQ/95uPxRPVdh6JW74zkeu+Eil+a/3xXBeHyron8+MPV3+PXWwtNsfL2muR4h+v3lj7VK791HbtxK479j5Rjv+TkeJ/fmd9q2/y+OcR2B61wfH/zM3vjn0a/4cH1tXy6/78ndl1ImLl9TcuNxYXm8sWLFiwsLVw0Ecm7oby/P/1SPEPf/avW9c7+fz/M72ftq//fvrN7fP/1M1PtE/n/08NrJvKVyMjwxFjq1c6I49GjK28/sYXWlcal5qXmu1Tp597ZnL8uYnxUyOH+hd320t77qsHUTn+vxcpvvejv43P5XU3Xv/tfP1/5OYn2qfxf2Rg3ZEbrlf2vOvk8f+/SPHP0z+I43ndh13/93//P54vwreuz/dp/I8OrKt+x/tExC8MrDt+NOKB+6UMAAAA7rCUivhBnk8dv8186j9Fijf++xdzXTpW1j2fH69Vf4+9uNT+wpnFxaULjdXG+cVmfa7TuNAs2/44UnT/+vHctqjmV/vzzb053u252H+JFM/9Wr+2Nxfb/2zqke3aibL2ZKT4kxdvrO1/jnF0u3ayrP23SDHxys61x7ZrT5W1/xUpfvoX9X7tkbL2S7n20e3akxeWFhf2YVgAAAAAAGBPRlIRz0SKvz81nPqfb+/m+5+3fOi9T9//e3Rg3cJdul9lz50KAPe48vx/vDyr//Jfbc3l33j+3/7/AAye/282+O8GfNDyRzn/1+7MbgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB87KQoYilSfOPxbro+Wv7cM3a21b56bX56Zudmh1PVcqiqL/+MTUye+uLTz5x+tp8f3v5O+3S8NHfuTP2FpSud5ebKSnOhPt9uXVhaaO76Gfba/mYnqg6oX7l8deHixZX65MlTNzx8rfbO6EPHalOnJ1452q+dn56ZmRuoGR75yK9+i/QB6w9FEf8bKS6//W7699GIIvbeF7d57+y3w9VOnKh2Yn56ptqRxVajvVo+ONvviCKiNtDo+X4f3YWx2JN6xJvl5pcbfKLcvblOY7lxfrFZn20sr7ZWW0vt2dTb2lSVF/FsiuhERHf01qcbiSJGIsVb3+mmH41GDPX74fMvzr08Pnn77Sn2YR93YTgiaiMRG8V9MGb3sNEo4ulI8e1vjcd/jPb6teq2pyK+WuaxiKtlXo9YK/OzEal8gzwS8d4O7yfuL8NRxMOR4idT3fTj0Tz21XHl7NfqX25fXBqo7R9X7vvzw910jx+bxqKId6sjfjf9p/+eAQAAAAAeIEU8Fime+OHxVM0Pbs0pttqX6uca5xd7H+v3P/uv51abm5ubtdTL8ZyzOTs513Ku59zI2c1ZK3L7nLM5OznXcq7n3MjZzVkbyu1zzubs5FzLuZ5zI2c3Z204t885m7OTcy3nes6NnN3hgxwvAAAAAAAAgJ0VUcTnIsVr3++mzdHeBO+r0cvr7gd64P1/AAAA//9W5Vt6")
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x1c3c42, 0x0)
write(0xffffffffffffffff, &(0x7f0000004200)="74efc4c419fdb8d66b12a7bbf371d056ad6f01e9762d70401d1c9d331b48b925e9e6a7759abb206b9b18bfc3f3f96adb2b37c2121ef21e91bac768dd33df29649da1d82e826a55c4d620b6f502daee26004b741c951d528d806efbe00c439f2df46d3adf8be24e280b948a49afd17d56437c6e752d84f99bf37a88f0c54488dd13b848f2381d7d2aecb68ed16762e4a3c1a847565364b9f1af92c9c89e06e89fe6179cb7078a742cb968a9f09cc690dc473df29d6ad9af5879e9a2618c63702117a3a63d3a4236baee86f5f452e9663a795306dabb97db884348ab437bdc13b7cfb03eff1cf216f0", 0xe8)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0xef)
write$cgroup_type(r5, &(0x7f0000000200), 0x175d900f)
getegid()
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x91, &(0x7f00000008c0)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x127b, 0x0)

03:23:01 executing program 2:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
socket$inet_udplite(0x2, 0x2, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$udf(&(0x7f0000000c00), &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="000d4bb72c5e1cda0e94577ab5fc264780b84b20b4694104e0fd15f2673b4d0332dc86548e07341a4ef12a1285f6cb7c84d447f58d382776e8351e0e0380b3b0ec4b1c4128124286af3dc702af20e3ef"], 0x1, 0xbee, &(0x7f0000000cc0)="$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")
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x1c3c42, 0x0)
write(0xffffffffffffffff, &(0x7f0000004200)="74efc4c419fdb8d66b12a7bbf371d056ad6f01e9762d70401d1c9d331b48b925e9e6a7759abb206b9b18bfc3f3f96adb2b37c2121ef21e91bac768dd33df29649da1d82e826a55c4d620b6f502daee26004b741c951d528d806efbe00c439f2df46d3adf8be24e280b948a49afd17d56437c6e752d84f99bf37a88f0c54488dd13b848f2381d7d2aecb68ed16762e4a3c1a847565364b9f1af92c9c89e06e89fe6179cb7078a742cb968a9f09cc690dc473df29d6ad9af5879e9a2618c63702117a3a63d3a4236baee86f5f452e9663a795306dabb97db884348ab437bdc13b7cfb03eff1cf216f0", 0xe8)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0xef)
write$cgroup_type(r5, &(0x7f0000000200), 0x175d900f)
getegid()
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x91, &(0x7f00000008c0)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x127b, 0x0)

03:23:02 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {0x3f00}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:23:03 executing program 1:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
socket$inet_udplite(0x2, 0x2, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$udf(&(0x7f0000000c00), &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="000d4bb72c5e1cda0e94577ab5fc264780b84b20b4694104e0fd15f2673b4d0332dc86548e07341a4ef12a1285f6cb7c84d447f58d382776e8351e0e0380b3b0ec4b1c4128124286af3dc702af20e3ef"], 0x1, 0xbee, &(0x7f0000000cc0)="$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")
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x1c3c42, 0x0)
write(0xffffffffffffffff, &(0x7f0000004200)="74efc4c419fdb8d66b12a7bbf371d056ad6f01e9762d70401d1c9d331b48b925e9e6a7759abb206b9b18bfc3f3f96adb2b37c2121ef21e91bac768dd33df29649da1d82e826a55c4d620b6f502daee26004b741c951d528d806efbe00c439f2df46d3adf8be24e280b948a49afd17d56437c6e752d84f99bf37a88f0c54488dd13b848f2381d7d2aecb68ed16762e4a3c1a847565364b9f1af92c9c89e06e89fe6179cb7078a742cb968a9f09cc690dc473df29d6ad9af5879e9a2618c63702117a3a63d3a4236baee86f5f452e9663a795306dabb97db884348ab437bdc13b7cfb03eff1cf216f0", 0xe8)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0xef)
write$cgroup_type(r5, &(0x7f0000000200), 0x175d900f)
getegid()
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x91, &(0x7f00000008c0)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x127b, 0x0)

[ 2528.117982][T31280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2528.525164][T31280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:23:04 executing program 0:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
socket$inet_udplite(0x2, 0x2, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$udf(&(0x7f0000000c00), &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="000d4bb72c5e1cda0e94577ab5fc264780b84b20b4694104e0fd15f2673b4d0332dc86548e07341a4ef12a1285f6cb7c84d447f58d382776e8351e0e0380b3b0ec4b1c4128124286af3dc702af20e3ef"], 0x1, 0xbee, &(0x7f0000000cc0)="$eJzs3UFsHNd5B/DvDUmRkotk61iykxrB2gUcVWlUkootGwxQq2aJplFs1hSTtu7BK3GlbkUtFyTlyEabuCcfWqBsCvTSFChQpDB6CNhDDu0pBQr0ShS5FQXUNHVdFAX2ECOXwixm9i25kmiLMEVRkn8/QPoPZ7+3O/Peema4b8cKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACDiV371zPhEOuitAADuphfnXh6fdP4HgI+Vc37/BwAAAAAAAAAAAACAe12KIt6NFN94vJterX7uGTvbal+9Nj89s3Ozw6lqOVTVl3/GJiZPffHpZ04/288Pb3+nfTpemjt3pv7C0pXOcnNlpblQn2+3LiwtNHf9DHttf7MTVQfUr1y+unDx4kp98uSpGx6+Vntn9KFjtanTE68c7dfOT8/MzA3UDI985Fe/xQfd4XEoirgYKS6//W5qREQRe++L27x39tvhaidOVDsxPz1T7chiq9FeLR+c7XdEEVEbaPR8v4/uwljsST3izXLzyw0+Ue7eXKex3Di/2KzPNpZXW6utpfZs6m1tqsqLeDZFdCKiO3rr041EEd+MFG99p5vOR8RQvx8+X90YfPvtKfZhH3dhOCJqIxEbxX0wZvew0Sjie5Hi298ajwu5X6tueyriq2Uei7ha5vWItTI/G5HKN8gjEe/t8H7i/jIcRfxRpPjJVDct9Me+Oq6c/Vr9y+2LSwO1/ePKfX9+uJvu8WPTWBTRqI743fTRL3YAAAAAALj3FPGnkeKJHx5PnRicU2y1L9XPNc4v9j4V7n/2X8+tNjc3N2upl+M5Z3N2cq7lXM+5kbObs1bk9jlnc3ZyruVcz7mRs5uzNpTb55zN2cm5lnM950bObs7acG6fczZnJ+dazvWcGzm7wwc4XAAAAAAAAACwg8NRxNcjxVO/9Fp1X3FU96V/cur0yyd/ffCe8cdu8zxl7cmIWC92d0/uoXzr8GyaTemA7iGmd//fH+T7//7woDcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4UEUU8WSkeO373RQpIuoRr0Yvr48e9NYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB3wlgq4r1I8edfGat+3igifjsi3t98fzMirr+/eacd9B4DAAAAAAAAwAMoFfF6pHjy5W6qRcS12jujDx2rTZ2eeOXoUAxFKksG61+aO3em/sLSlc5yc2WluVCfb7cuLC00d/tyY2db7avX5qdn9mVnbuvwPm//4bEXljqvL7cu/e7qjo8fGTtzfmV1uXFh54fjcBQR9cE1J6oNnp+eqTZ6sdVoV01n0263GAAAAAAAAICPg5FUxPuR4q2/eXtr3nm4N+c/fHPtd78UUeTl6Tz/vDUNXX1v4BPV9wZ6y5+cOv0bk58ZXN5xyvpENaFen5+emZkbWD08cmvpWH7d8b3tMgPK8V+NFH/8l/X0RF534/gPbdV+9/e3x/vNm5/oA8Z8r+P/swPrytdMqYi/ixQ/95uPxRPVdh6JW74zkeu+Eil+a/3xXBeHyron8+MPV3+PXWwtNsfL2muR4h+v3lj7VK791HbtxK479j5Rjv+TkeJ/fmd9q2/y+OcR2B61wfH/zM3vjn0a/4cH1tXy6/78ndl1ImLl9TcuNxYXm8sWLFiwsLVw0Ecm7oby/P/1SPEPf/avW9c7+fz/M72ftq//fvrN7fP/1M1PtE/n/08NrJvKVyMjwxFjq1c6I49GjK28/sYXWlcal5qXmu1Tp597ZnL8uYnxUyOH+hd320t77qsHUTn+vxcpvvejv43P5XU3Xv/tfP1/5OYn2qfxf2Rg3ZEbrlf2vOvk8f+/SPHP0z+I43ndh13/93//P54vwreuz/dp/I8OrKt+x/tExC8MrDt+NOKB+6UMAAAA7rCUivhBnk8dv8186j9Fijf++xdzXTpW1j2fH69Vf4+9uNT+wpnFxaULjdXG+cVmfa7TuNAs2/44UnT/+vHctqjmV/vzzb053u252H+JFM/9Wr+2Nxfb/2zqke3aibL2ZKT4kxdvrO1/jnF0u3ayrP23SDHxys61x7ZrT5W1/xUpfvoX9X7tkbL2S7n20e3akxeWFhf2YVgAAAAAAGBPRlIRz0SKvz81nPqfb+/m+5+3fOi9T9//e3Rg3cJdul9lz50KAPe48vx/vDyr//Jfbc3l33j+3/7/AAye/282+O8GfNDyRzn/1+7MbgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB87KQoYilSfOPxbro+Wv7cM3a21b56bX56Zudmh1PVcqiqL/+MTUye+uLTz5x+tp8f3v5O+3S8NHfuTP2FpSud5ebKSnOhPt9uXVhaaO76Gfba/mYnqg6oX7l8deHixZX65MlTNzx8rfbO6EPHalOnJ1452q+dn56ZmRuoGR75yK9+i/QB6w9FEf8bKS6//W7699GIIvbeF7d57+y3w9VOnKh2Yn56ptqRxVajvVo+ONvviCKiNtDo+X4f3YWx2JN6xJvl5pcbfKLcvblOY7lxfrFZn20sr7ZWW0vt2dTb2lSVF/FsiuhERHf01qcbiSJGIsVb3+mmH41GDPX74fMvzr08Pnn77Sn2YR93YTgiaiMRG8V9MGb3sNEo4ulI8e1vjcd/jPb6teq2pyK+WuaxiKtlXo9YK/OzEal8gzwS8d4O7yfuL8NRxMOR4idT3fTj0Tz21XHl7NfqX25fXBqo7R9X7vvzw910jx+bxqKId6sjfjf9p/+eAQAAAAAeIEU8Fime+OHxVM0Pbs0pttqX6uca5xd7H+v3P/uv51abm5ubtdTL8ZyzOTs513Ku59zI2c1ZK3L7nLM5OznXcq7n3MjZzVkbyu1zzubs5FzLuZ5zI2c3Z204t885m7OTcy3nes6NnN3hgxwvAAAAAAAAgJ0VUcTnIsVr3++mzdHeBO+r0cvr7gd64P1/AAAA//9W5Vt6")
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x1c3c42, 0x0)
write(0xffffffffffffffff, &(0x7f0000004200)="74efc4c419fdb8d66b12a7bbf371d056ad6f01e9762d70401d1c9d331b48b925e9e6a7759abb206b9b18bfc3f3f96adb2b37c2121ef21e91bac768dd33df29649da1d82e826a55c4d620b6f502daee26004b741c951d528d806efbe00c439f2df46d3adf8be24e280b948a49afd17d56437c6e752d84f99bf37a88f0c54488dd13b848f2381d7d2aecb68ed16762e4a3c1a847565364b9f1af92c9c89e06e89fe6179cb7078a742cb968a9f09cc690dc473df29d6ad9af5879e9a2618c63702117a3a63d3a4236baee86f5f452e9663a795306dabb97db884348ab437bdc13b7cfb03eff1cf216f0", 0xe8)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0xef)
write$cgroup_type(r5, &(0x7f0000000200), 0x175d900f)
getegid()
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x91, &(0x7f00000008c0)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x127b, 0x0)

[ 2528.587380][T31285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2528.735424][T31292] wlan1: authenticate with 08:02:11:00:00:00
[ 2528.743413][T31292] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2528.758104][T31292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:23:04 executing program 2:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
socket$inet_udplite(0x2, 0x2, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$udf(&(0x7f0000000c00), &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="000d4bb72c5e1cda0e94577ab5fc264780b84b20b4694104e0fd15f2673b4d0332dc86548e07341a4ef12a1285f6cb7c84d447f58d382776e8351e0e0380b3b0ec4b1c4128124286af3dc702af20e3ef"], 0x1, 0xbee, &(0x7f0000000cc0)="$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")
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x1c3c42, 0x0)
write(0xffffffffffffffff, &(0x7f0000004200)="74efc4c419fdb8d66b12a7bbf371d056ad6f01e9762d70401d1c9d331b48b925e9e6a7759abb206b9b18bfc3f3f96adb2b37c2121ef21e91bac768dd33df29649da1d82e826a55c4d620b6f502daee26004b741c951d528d806efbe00c439f2df46d3adf8be24e280b948a49afd17d56437c6e752d84f99bf37a88f0c54488dd13b848f2381d7d2aecb68ed16762e4a3c1a847565364b9f1af92c9c89e06e89fe6179cb7078a742cb968a9f09cc690dc473df29d6ad9af5879e9a2618c63702117a3a63d3a4236baee86f5f452e9663a795306dabb97db884348ab437bdc13b7cfb03eff1cf216f0", 0xe8)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0xef)
write$cgroup_type(r5, &(0x7f0000000200), 0x175d900f)
getegid()
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x91, &(0x7f00000008c0)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x127b, 0x0)

[ 2528.822087][T30442] wlan1: authenticated
[ 2528.822779][T31293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2528.826942][T21994] mac80211_hwsim hwsim83 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
[ 2528.884544][T30442] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[ 2528.916703][T31292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2528.918069][T30446] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[ 2528.995756][T30446] wlan1: associated
03:23:04 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0xf0ffffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2529.197944][T31300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:23:04 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {0x4000}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2529.351691][T31300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2529.425417][T31303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2529.518188][T31303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2529.603800][T31312] overlayfs: missing 'lowerdir'
03:23:05 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0xfcffffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2531.894081][T31303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2533.618172][T31328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2533.721787][T31329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2533.776551][ T1253] ieee802154 phy0 wpan0: encryption failed: -22
[ 2533.783486][ T1253] ieee802154 phy1 wpan1: encryption failed: -22
[ 2533.816144][T31328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:23:09 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = gettid()
sched_setaffinity(r3, 0x8, &(0x7f0000002280)=0x2ac)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000100000000000080e1695"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r4}, 0x10)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)}, {&(0x7f00000007c0)}, {&(0x7f0000000800)}], 0x3, &(0x7f0000002780)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRESHEX=r0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00$\x00\x00\x00', @ANYRES32, @ANYRES64, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32], 0x140}, 0x4000001)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lseek(0xffffffffffffffff, 0x100, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000800)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[])
utimes(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000440)={{0x77359400}, {0x77359400}})
mkdir(&(0x7f00000002c0)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000780)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0'])
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/snmp6\x00')

03:23:11 executing program 1:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
socket$inet_udplite(0x2, 0x2, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$udf(&(0x7f0000000c00), &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="000d4bb72c5e1cda0e94577ab5fc264780b84b20b4694104e0fd15f2673b4d0332dc86548e07341a4ef12a1285f6cb7c84d447f58d382776e8351e0e0380b3b0ec4b1c4128124286af3dc702af20e3ef"], 0x1, 0xbee, &(0x7f0000000cc0)="$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")
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x1c3c42, 0x0)
write(0xffffffffffffffff, &(0x7f0000004200)="74efc4c419fdb8d66b12a7bbf371d056ad6f01e9762d70401d1c9d331b48b925e9e6a7759abb206b9b18bfc3f3f96adb2b37c2121ef21e91bac768dd33df29649da1d82e826a55c4d620b6f502daee26004b741c951d528d806efbe00c439f2df46d3adf8be24e280b948a49afd17d56437c6e752d84f99bf37a88f0c54488dd13b848f2381d7d2aecb68ed16762e4a3c1a847565364b9f1af92c9c89e06e89fe6179cb7078a742cb968a9f09cc690dc473df29d6ad9af5879e9a2618c63702117a3a63d3a4236baee86f5f452e9663a795306dabb97db884348ab437bdc13b7cfb03eff1cf216f0", 0xe8)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0xef)
write$cgroup_type(r5, &(0x7f0000000200), 0x175d900f)
getegid()
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x91, &(0x7f00000008c0)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x127b, 0x0)

03:23:11 executing program 0:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
socket$inet_udplite(0x2, 0x2, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$udf(&(0x7f0000000c00), &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="000d4bb72c5e1cda0e94577ab5fc264780b84b20b4694104e0fd15f2673b4d0332dc86548e07341a4ef12a1285f6cb7c84d447f58d382776e8351e0e0380b3b0ec4b1c4128124286af3dc702af20e3ef"], 0x1, 0xbee, &(0x7f0000000cc0)="$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")
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x1c3c42, 0x0)
write(0xffffffffffffffff, &(0x7f0000004200)="74efc4c419fdb8d66b12a7bbf371d056ad6f01e9762d70401d1c9d331b48b925e9e6a7759abb206b9b18bfc3f3f96adb2b37c2121ef21e91bac768dd33df29649da1d82e826a55c4d620b6f502daee26004b741c951d528d806efbe00c439f2df46d3adf8be24e280b948a49afd17d56437c6e752d84f99bf37a88f0c54488dd13b848f2381d7d2aecb68ed16762e4a3c1a847565364b9f1af92c9c89e06e89fe6179cb7078a742cb968a9f09cc690dc473df29d6ad9af5879e9a2618c63702117a3a63d3a4236baee86f5f452e9663a795306dabb97db884348ab437bdc13b7cfb03eff1cf216f0", 0xe8)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0xef)
write$cgroup_type(r5, &(0x7f0000000200), 0x175d900f)
getegid()
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x91, &(0x7f00000008c0)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x127b, 0x0)

03:23:11 executing program 2:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
socket$inet_udplite(0x2, 0x2, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$udf(&(0x7f0000000c00), &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="000d4bb72c5e1cda0e94577ab5fc264780b84b20b4694104e0fd15f2673b4d0332dc86548e07341a4ef12a1285f6cb7c84d447f58d382776e8351e0e0380b3b0ec4b1c4128124286af3dc702af20e3ef"], 0x1, 0xbee, &(0x7f0000000cc0)="$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")
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x1c3c42, 0x0)
write(0xffffffffffffffff, &(0x7f0000004200)="74efc4c419fdb8d66b12a7bbf371d056ad6f01e9762d70401d1c9d331b48b925e9e6a7759abb206b9b18bfc3f3f96adb2b37c2121ef21e91bac768dd33df29649da1d82e826a55c4d620b6f502daee26004b741c951d528d806efbe00c439f2df46d3adf8be24e280b948a49afd17d56437c6e752d84f99bf37a88f0c54488dd13b848f2381d7d2aecb68ed16762e4a3c1a847565364b9f1af92c9c89e06e89fe6179cb7078a742cb968a9f09cc690dc473df29d6ad9af5879e9a2618c63702117a3a63d3a4236baee86f5f452e9663a795306dabb97db884348ab437bdc13b7cfb03eff1cf216f0", 0xe8)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0xef)
write$cgroup_type(r5, &(0x7f0000000200), 0x175d900f)
getegid()
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x91, &(0x7f00000008c0)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x127b, 0x0)

03:23:11 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0xffff8e88, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2536.137830][T31342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2536.214663][T31345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2537.915786][T31342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:23:13 executing program 0:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
socket$inet_udplite(0x2, 0x2, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$udf(&(0x7f0000000c00), &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="000d4bb72c5e1cda0e94577ab5fc264780b84b20b4694104e0fd15f2673b4d0332dc86548e07341a4ef12a1285f6cb7c84d447f58d382776e8351e0e0380b3b0ec4b1c4128124286af3dc702af20e3ef"], 0x1, 0xbee, &(0x7f0000000cc0)="$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")
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x1c3c42, 0x0)
write(0xffffffffffffffff, &(0x7f0000004200)="74efc4c419fdb8d66b12a7bbf371d056ad6f01e9762d70401d1c9d331b48b925e9e6a7759abb206b9b18bfc3f3f96adb2b37c2121ef21e91bac768dd33df29649da1d82e826a55c4d620b6f502daee26004b741c951d528d806efbe00c439f2df46d3adf8be24e280b948a49afd17d56437c6e752d84f99bf37a88f0c54488dd13b848f2381d7d2aecb68ed16762e4a3c1a847565364b9f1af92c9c89e06e89fe6179cb7078a742cb968a9f09cc690dc473df29d6ad9af5879e9a2618c63702117a3a63d3a4236baee86f5f452e9663a795306dabb97db884348ab437bdc13b7cfb03eff1cf216f0", 0xe8)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0xef)
write$cgroup_type(r5, &(0x7f0000000200), 0x175d900f)
getegid()
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x91, &(0x7f00000008c0)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x127b, 0x0)

03:23:13 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0xffffff7f, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2542.604601][T31363] overlayfs: missing 'lowerdir'
03:23:19 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0xfffffff0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2544.210927][T30407] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
03:23:19 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = gettid()
sched_setaffinity(r3, 0x8, &(0x7f0000002280)=0x2ac)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000100000000000080e1695"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r4}, 0x10)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)}, {&(0x7f00000007c0)}, {&(0x7f0000000800)}], 0x3, &(0x7f0000002780)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRESHEX=r0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00$\x00\x00\x00', @ANYRES32, @ANYRES64, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32], 0x140}, 0x4000001)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lseek(0xffffffffffffffff, 0x100, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000800)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[])
utimes(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000440)={{0x77359400}, {0x77359400}})
mkdir(&(0x7f00000002c0)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000780)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0'])
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/snmp6\x00')

03:23:19 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = gettid()
sched_setaffinity(r3, 0x8, &(0x7f0000002280)=0x2ac)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000100000000000080e1695"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r4}, 0x10)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)}, {&(0x7f00000007c0)}, {&(0x7f0000000800)}], 0x3, &(0x7f0000002780)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRESHEX=r0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00$\x00\x00\x00', @ANYRES32, @ANYRES64, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32], 0x140}, 0x4000001)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lseek(0xffffffffffffffff, 0x100, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000800)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[])
utimes(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000440)={{0x77359400}, {0x77359400}})
mkdir(&(0x7f00000002c0)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000780)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0'])
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/snmp6\x00')

[ 2544.506108][T31370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2544.616738][T31370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2544.748144][T31376] overlayfs: missing 'lowerdir'
[ 2544.942714][T30407] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2547.300094][T30407] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2547.858405][T31385] overlayfs: missing 'lowerdir'
[ 2548.788421][T30407] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2550.019127][T30407] device hsr_slave_0 left promiscuous mode
[ 2550.045326][T30407] device hsr_slave_1 left promiscuous mode
[ 2550.055077][T30407] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2550.062534][T30407] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2550.095905][T30407] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2550.103365][T30407] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2550.113217][T30407] device bridge_slave_1 left promiscuous mode
[ 2550.120375][T30407] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2550.130042][T30407] device bridge_slave_0 left promiscuous mode
[ 2550.136945][T30407] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2550.153729][T30407] device veth1_macvtap left promiscuous mode
[ 2550.169282][T30407] device veth0_macvtap left promiscuous mode
[ 2550.171108][T16923] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2550.185073][T30407] device veth1_vlan left promiscuous mode
[ 2550.186243][T16923] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2550.191605][T30407] device veth0_vlan left promiscuous mode
[ 2550.201942][T16923] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2550.212978][T16923] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 2550.233772][T16923] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2550.502158][T30407] team0 (unregistering): Port device team_slave_1 removed
[ 2550.519800][T30407] team0 (unregistering): Port device team_slave_0 removed
[ 2550.540009][T30407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2550.556457][T30407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2550.651317][T30407] bond0 (unregistering): Released all slaves
[ 2551.199362][T31403] chnl_net:caif_netlink_parms(): no params data found
[ 2551.294825][T21395] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 2551.313148][T21395] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 2551.322444][T21395] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 2551.338605][T21395] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 2551.357565][T21395] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 2551.365964][T21395] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 2551.455883][T31403] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2551.468568][T31403] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2551.494324][T31403] device bridge_slave_0 entered promiscuous mode
[ 2551.526045][T31403] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2551.541236][T31403] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2551.553039][T31403] device bridge_slave_1 entered promiscuous mode
[ 2551.661581][T31403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2551.689462][T31403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2551.841569][T31403] team0: Port device team_slave_0 added
[ 2551.868242][T31403] team0: Port device team_slave_1 added
[ 2551.967265][T31403] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2551.975034][T31403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2552.003774][T31403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2552.038251][T31403] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2552.064177][T31403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2552.124456][T31403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2552.160203][T31417] chnl_net:caif_netlink_parms(): no params data found
[ 2552.322561][T31403] device hsr_slave_0 entered promiscuous mode
[ 2552.334802][T21395] Bluetooth: hci4: command 0x0409 tx timeout
[ 2552.345061][T31403] device hsr_slave_1 entered promiscuous mode
[ 2552.351914][T31403] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2552.360088][T31403] Cannot create hsr debugfs directory
[ 2552.579032][T31417] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2552.604348][T31417] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2552.624411][T31417] device bridge_slave_0 entered promiscuous mode
[ 2552.678775][T31417] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2552.692862][T31417] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2552.733217][T31417] device bridge_slave_1 entered promiscuous mode
[ 2552.915756][T31417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2552.951781][T31417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2553.226740][T31417] team0: Port device team_slave_0 added
[ 2553.265981][T31417] team0: Port device team_slave_1 added
[ 2553.454438][T21395] Bluetooth: hci5: command 0x0409 tx timeout
[ 2553.522479][T31417] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2553.574164][T31417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2553.659391][T31417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2553.696697][T31417] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2553.704461][T31417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2553.791527][T31417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2553.960000][T31417] device hsr_slave_0 entered promiscuous mode
[ 2553.975552][T31417] device hsr_slave_1 entered promiscuous mode
[ 2554.004517][T31417] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2554.012251][T31417] Cannot create hsr debugfs directory
[ 2554.295171][T31403] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2554.324325][T31403] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2554.341811][T31403] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2554.372434][T31403] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2554.414455][T21395] Bluetooth: hci4: command 0x041b tx timeout
[ 2554.600371][T31417] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2554.706380][T31417] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2554.757702][T31403] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2554.790348][T31417] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2554.861825][T31403] 8021q: adding VLAN 0 to HW filter on device team0
[ 2554.891873][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2554.903900][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2554.922582][T31417] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2555.024458][T19430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2555.034991][T19430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2555.044693][T19430] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2555.052427][T19430] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2555.062247][T19430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2555.072921][T19430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2555.082556][T19430] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2555.090376][T19430] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2555.150248][T22270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2555.165408][T22270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2555.187216][T22270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2555.256704][T22270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2555.268443][T22270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2555.280635][T22270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2555.292017][T22270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2555.303170][T22272] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2555.362051][T31403] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 2555.392559][T31403] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2555.416370][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2555.426476][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2555.435733][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2555.445436][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2555.515670][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2555.534441][T21395] Bluetooth: hci5: command 0x041b tx timeout
[ 2555.666673][T31417] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2555.680072][T31417] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2555.720306][T31417] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2555.746217][T31417] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2555.917395][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2555.925566][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2555.939947][T31403] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2556.058507][T31417] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2556.125884][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2556.134905][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2556.154005][T31417] 8021q: adding VLAN 0 to HW filter on device team0
[ 2556.230615][T30407] device hsr_slave_0 left promiscuous mode
[ 2556.241852][T30407] device hsr_slave_1 left promiscuous mode
[ 2556.262212][T30407] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2556.273754][T30407] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2556.301143][T30407] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2556.312646][T30407] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2556.330620][T30407] device bridge_slave_1 left promiscuous mode
[ 2556.341414][T30407] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2556.352189][T30407] device bridge_slave_0 left promiscuous mode
[ 2556.359069][T30407] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2556.373349][T30407] device veth1_macvtap left promiscuous mode
[ 2556.379541][T30407] device veth0_macvtap left promiscuous mode
[ 2556.386863][T30407] device veth1_vlan left promiscuous mode
[ 2556.392717][T30407] device veth0_vlan left promiscuous mode
[ 2556.495488][T21395] Bluetooth: hci4: command 0x040f tx timeout
[ 2556.660362][T30407] team0 (unregistering): Port device team_slave_1 removed
[ 2556.678290][T30407] team0 (unregistering): Port device team_slave_0 removed
[ 2556.698239][T30407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2556.718518][T30407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2556.822336][T30407] bond0 (unregistering): Released all slaves
[ 2556.916581][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2556.925786][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2556.934363][T21994] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2556.941473][T21994] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2556.949972][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2556.958953][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2556.968536][T21994] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2556.975696][T21994] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2556.994763][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2557.002951][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2557.022205][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2557.070244][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2557.102228][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2557.113969][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2557.151041][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2557.177459][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2557.211063][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2557.273636][T31417] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2557.303954][T31417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2557.324846][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2557.333680][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2557.351614][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2557.397295][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2557.411721][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2557.445307][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2557.453844][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2557.482266][T31403] device veth0_vlan entered promiscuous mode
[ 2557.517092][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2557.526350][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2557.549102][T31403] device veth1_vlan entered promiscuous mode
[ 2557.614217][T21395] Bluetooth: hci5: command 0x040f tx timeout
[ 2557.669130][T22272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2557.703096][T22272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2557.738605][T22272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2557.758598][T22272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2557.806985][T31403] device veth0_macvtap entered promiscuous mode
[ 2557.844741][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2557.853069][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2557.874031][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2557.886914][T31403] device veth1_macvtap entered promiscuous mode
[ 2557.917669][T31417] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2557.949520][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2558.024042][T31403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2558.054184][T31403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2558.086911][T31403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2558.120020][T31403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2558.162810][T31403] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2558.206138][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2558.215784][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2558.257084][T31403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2558.274167][T31403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2558.284046][T31403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2558.331172][T31403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2558.372691][T31403] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2558.420255][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2558.430522][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2558.449361][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2558.462775][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2558.496652][T31403] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2558.521501][T31403] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2558.533285][T31403] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2558.550003][T31403] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2558.573992][T31417] device veth0_vlan entered promiscuous mode
[ 2558.580969][T21395] Bluetooth: hci4: command 0x0419 tx timeout
[ 2558.597149][T22272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2558.608489][T22272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2558.629694][T22272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2558.649021][T22272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2558.703713][T31417] device veth1_vlan entered promiscuous mode
[ 2558.856921][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2558.885118][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2558.893581][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2558.915243][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2558.927628][T31417] device veth0_macvtap entered promiscuous mode
[ 2558.958188][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2559.005101][T31417] device veth1_macvtap entered promiscuous mode
[ 2559.035523][T30442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2559.044008][T30442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2559.125678][T19430] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2559.142681][T31417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2559.181066][T31417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2559.204223][T31417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2559.222261][T31417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2559.251710][T31417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2559.291586][T31417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2559.315954][T31417] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2559.329978][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2559.345094][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2559.371896][T31417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2559.375422][T30446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2559.406894][T31417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2559.424265][T31417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2559.434363][T30446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2559.455205][T31417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2559.479513][T31417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2559.509777][T31417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2559.554843][T31417] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2559.589419][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2559.598230][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2559.625793][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2559.665875][T31417] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2559.694331][T16923] Bluetooth: hci5: command 0x0419 tx timeout
[ 2559.702888][T31417] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2559.745878][T31417] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2559.764913][T31417] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2559.817435][T31527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2559.879666][T22270] wlan1: authenticate with 08:02:11:00:00:00
[ 2559.928110][T22270] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2560.004094][T30296] wlan1: authenticated
[ 2560.004531][T31529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2560.010681][T21994] mac80211_hwsim hwsim85 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
[ 2560.056421][T30296] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[ 2560.088889][T30442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2560.098413][T30442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2560.111276][T30296] wlan1: associated
[ 2560.123301][T31530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2560.149491][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2560.342514][T30296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2560.356691][T30296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2560.390512][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2560.522371][T31537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2560.569655][T22272] wlan1: authenticate with 08:02:11:00:00:00
[ 2560.586765][T22272] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2560.596315][T31538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2560.614380][T30442] wlan1: authenticated
[ 2560.618847][T29724] mac80211_hwsim hwsim87 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
[ 2560.644381][T30309] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[ 2560.686936][T31537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2560.688366][T30442] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[ 2560.753089][T30442] wlan1: associated
[ 2560.850019][T30407] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2561.009456][T30407] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2561.241478][T30407] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2561.380972][T30407] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2562.295853][T30407] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING)
[ 2562.511885][T30407] device hsr_slave_0 left promiscuous mode
[ 2562.521551][T30407] device hsr_slave_1 left promiscuous mode
[ 2562.530405][T30407] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2562.538724][T30407] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2562.550705][T30407] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2562.559299][T30407] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2562.570849][T30407] device bridge_slave_1 left promiscuous mode
[ 2562.579299][T30407] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2562.592385][T30407] device bridge_slave_0 left promiscuous mode
[ 2562.610221][T30407] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2562.650791][T30407] device veth1_macvtap left promiscuous mode
[ 2562.661607][T30407] device veth0_macvtap left promiscuous mode
[ 2562.684688][T30407] device veth1_vlan left promiscuous mode
[ 2562.691164][T30407] device veth0_vlan left promiscuous mode
[ 2563.129102][T30407] team0 (unregistering): Port device team_slave_1 removed
[ 2563.152573][T30407] team0 (unregistering): Port device team_slave_0 removed
[ 2563.183323][T21395] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2563.194350][T21395] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2563.206235][T30407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2563.214884][T21395] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2563.225812][T21395] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 2563.235708][T21395] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2563.251058][T30407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2563.363005][T30407] bond0 (unregistering): Released all slaves
[ 2563.754070][T31577] chnl_net:caif_netlink_parms(): no params data found
[ 2563.855905][T31577] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2563.863121][T31577] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2563.886416][T31577] device bridge_slave_0 entered promiscuous mode
[ 2563.902938][T31577] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2563.910538][T31577] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2563.918927][T31577] device bridge_slave_1 entered promiscuous mode
[ 2563.964761][T31577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2563.983502][T31577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2564.107491][T31577] team0: Port device team_slave_0 added
[ 2564.127524][T31577] team0: Port device team_slave_1 added
[ 2564.184517][T31577] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2564.191631][T31577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2564.250460][T31577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2564.283268][T31577] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2564.294331][T31577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2564.364867][T31577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2564.441388][T31577] device hsr_slave_0 entered promiscuous mode
[ 2564.465487][T31577] device hsr_slave_1 entered promiscuous mode
[ 2564.475609][T31577] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2564.483218][T31577] Cannot create hsr debugfs directory
[ 2565.294564][T21395] Bluetooth: hci4: command 0x0409 tx timeout
[ 2565.823135][T31577] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2565.842489][T31577] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2565.863251][T31577] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2565.881427][T31577] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2566.040544][T31577] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2566.082361][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2566.093941][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2566.134555][T31577] 8021q: adding VLAN 0 to HW filter on device team0
[ 2566.173451][T21991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2566.193352][T21991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2566.214832][T21991] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2566.221970][T21991] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2566.264838][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2566.275161][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2566.284024][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2566.313803][T29724] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2566.321002][T29724] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2566.337579][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2566.374326][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2566.383347][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2566.427633][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2566.445699][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2566.463401][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2566.496033][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2566.518529][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2566.540575][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2566.556727][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2566.570927][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2566.584625][T31577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2566.916617][T21991] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2566.925934][T21991] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2566.940116][T31577] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2567.371204][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2567.374474][T21395] Bluetooth: hci4: command 0x041b tx timeout
[ 2567.387659][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2567.448158][T31577] device veth0_vlan entered promiscuous mode
[ 2567.455957][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2567.466222][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2567.488084][T31577] device veth1_vlan entered promiscuous mode
[ 2567.502856][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2567.512719][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2567.528482][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2567.571664][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2567.580774][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2567.590700][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2567.602317][T31577] device veth0_macvtap entered promiscuous mode
[ 2567.621083][T31577] device veth1_macvtap entered promiscuous mode
[ 2567.636408][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2567.645873][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2567.661485][T31577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2567.673695][T31577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2567.686838][T31577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2567.699733][T31577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2567.717970][T31577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2567.728879][T31577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2567.741212][T31577] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2567.751925][T21991] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2567.761859][T21991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2567.773294][T31577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2567.788183][T31577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2567.802369][T31577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2567.814530][T31577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2567.831580][T31577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2567.842768][T31577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2567.866347][T31577] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2567.876210][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2567.892891][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2567.906415][T31577] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2567.920672][T31577] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2567.930412][T31577] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2567.940137][T31577] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2568.070811][T30407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2568.101869][T30407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2568.143869][T21991] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2568.163290][T30296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2568.173039][T30296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2568.204884][T21991] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2568.330728][T31662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2568.372843][T21991] wlan1: authenticate with 08:02:11:00:00:00
[ 2568.400454][T21991] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2568.414632][T30407] wlan1: authenticated
[ 2568.419913][T21991] mac80211_hwsim hwsim89 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
[ 2568.434596][T31662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2568.455666][T30407] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[ 2568.584693][T30296] wlan1: associate with 08:02:11:00:00:00 (try 2/3)
[ 2568.694575][T30296] wlan1: associate with 08:02:11:00:00:00 (try 3/3)
[ 2568.804361][T30296] wlan1: association with 08:02:11:00:00:00 timed out
[ 2570.752365][T30407] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2571.951587][T30407] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2572.059679][T30407] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2572.148904][T30407] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2572.653202][T16923] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2572.672701][T16923] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2572.683116][T16923] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2572.692545][T16923] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2572.701273][T16923] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 2572.709564][T16923] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2573.048257][T31683] chnl_net:caif_netlink_parms(): no params data found
[ 2573.271641][T30407] device hsr_slave_0 left promiscuous mode
[ 2573.278483][T30407] device hsr_slave_1 left promiscuous mode
[ 2573.286236][T30407] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2573.301166][T30407] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2573.313209][T30407] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2573.321245][T30407] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2573.330865][T30407] device bridge_slave_1 left promiscuous mode
[ 2573.337511][T30407] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2573.346793][T30407] device bridge_slave_0 left promiscuous mode
[ 2573.353037][T30407] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2573.367593][T30407] device veth1_macvtap left promiscuous mode
[ 2573.373666][T30407] device veth0_macvtap left promiscuous mode
[ 2573.380595][T30407] device veth1_vlan left promiscuous mode
[ 2573.386553][T30407] device veth0_vlan left promiscuous mode
[ 2573.663627][T30407] team0 (unregistering): Port device team_slave_1 removed
[ 2573.681783][T30407] team0 (unregistering): Port device team_slave_0 removed
[ 2573.709986][T30407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2573.732558][T30407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2573.841138][T30407] bond0 (unregistering): Released all slaves
[ 2573.899569][T31683] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2573.916576][T31683] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2573.925876][T31683] device bridge_slave_0 entered promiscuous mode
[ 2573.937800][T31683] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2573.945836][T31683] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2573.958059][T31683] device bridge_slave_1 entered promiscuous mode
[ 2573.998669][T31683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2574.012966][T31683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2574.072139][T31683] team0: Port device team_slave_0 added
[ 2574.082065][T31683] team0: Port device team_slave_1 added
[ 2574.140675][T31683] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2574.152179][T31683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2574.196124][T31683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2574.216862][T31683] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2574.223854][T31683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2574.257074][T31683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2574.335592][T31683] device hsr_slave_0 entered promiscuous mode
[ 2574.343528][T31683] device hsr_slave_1 entered promiscuous mode
[ 2574.365235][T31683] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2574.373611][T31683] Cannot create hsr debugfs directory
[ 2574.814799][ T3580] Bluetooth: hci4: command 0x0409 tx timeout
[ 2575.467794][T31683] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2575.513306][T31683] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2575.525664][T31683] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2575.547314][T31683] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2575.743339][T31683] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2575.802025][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2575.825623][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2575.837638][T31683] 8021q: adding VLAN 0 to HW filter on device team0
[ 2575.864490][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2575.875186][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2575.883763][T29724] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2575.890921][T29724] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2575.920601][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2575.931568][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2575.952613][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2575.961690][T21994] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2575.968873][T21994] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2575.994611][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2576.046573][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2576.063982][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2576.083907][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2576.103000][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2576.119570][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2576.131530][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2576.158539][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2576.196005][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2576.217180][T22272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2576.235616][T22272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2576.260013][T31683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2576.781851][T22272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2576.790310][T22272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2576.809705][T31683] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2576.904092][ T3580] Bluetooth: hci4: command 0x041b tx timeout
[ 2577.262894][T22272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2577.275155][T22272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2577.306323][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2577.316031][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2577.328403][T31683] device veth0_vlan entered promiscuous mode
[ 2577.340204][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2577.348784][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2577.362059][T31683] device veth1_vlan entered promiscuous mode
[ 2577.391023][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2577.400124][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2577.410251][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2577.424705][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2577.436020][T31683] device veth0_macvtap entered promiscuous mode
[ 2577.451363][T31683] device veth1_macvtap entered promiscuous mode
[ 2577.472839][T31683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2577.485277][T31683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2577.496699][T31683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2577.507604][T31683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2577.517897][T31683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2577.529084][T31683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2577.541445][T31683] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2577.562979][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2577.571684][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2577.580400][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2577.589606][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2577.612792][T31683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2577.625984][T31683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2577.636791][T31683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2577.648238][T31683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2577.658944][T31683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2577.670652][T31683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2577.683811][T31683] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2577.696221][T22270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2577.706658][T22270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2577.723590][T31683] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2577.735785][T31683] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2577.746684][T31683] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2577.756531][T31683] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2577.899429][T30407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2577.928637][T30407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2577.948922][T30296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2577.964715][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2577.980064][T30296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2578.005608][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2578.099338][T31767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2578.142059][T21994] wlan1: authenticate with 08:02:11:00:00:00
[ 2578.151394][T21994] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2578.165117][T31768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2578.177444][T30442] wlan1: authenticated
[ 2578.185232][ T8472] mac80211_hwsim hwsim91 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
[ 2578.204312][T30442] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[ 2578.249148][T31767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2578.254440][T30442] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[ 2578.269987][T30442] wlan1: associated
03:23:54 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {0x4100}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:23:54 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = gettid()
sched_setaffinity(r3, 0x8, &(0x7f0000002280)=0x2ac)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000100000000000080e1695"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r4}, 0x10)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)}, {&(0x7f00000007c0)}, {&(0x7f0000000800)}], 0x3, &(0x7f0000002780)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRESHEX=r0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00$\x00\x00\x00', @ANYRES32, @ANYRES64, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32], 0x140}, 0x4000001)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lseek(0xffffffffffffffff, 0x100, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000800)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[])
utimes(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000440)={{0x77359400}, {0x77359400}})
mkdir(&(0x7f00000002c0)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000780)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0'])
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/snmp6\x00')

03:23:54 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = gettid()
sched_setaffinity(r3, 0x8, &(0x7f0000002280)=0x2ac)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000100000000000080e1695"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r4}, 0x10)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)}, {&(0x7f00000007c0)}, {&(0x7f0000000800)}], 0x3, &(0x7f0000002780)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRESHEX=r0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00$\x00\x00\x00', @ANYRES32, @ANYRES64, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32], 0x140}, 0x4000001)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lseek(0xffffffffffffffff, 0x100, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000800)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[])
utimes(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000440)={{0x77359400}, {0x77359400}})
mkdir(&(0x7f00000002c0)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000780)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0'])
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/snmp6\x00')

03:23:54 executing program 0:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
socket$inet_udplite(0x2, 0x2, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$udf(&(0x7f0000000c00), &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="000d4bb72c5e1cda0e94577ab5fc264780b84b20b4694104e0fd15f2673b4d0332dc86548e07341a4ef12a1285f6cb7c84d447f58d382776e8351e0e0380b3b0ec4b1c4128124286af3dc702af20e3ef"], 0x1, 0xbee, &(0x7f0000000cc0)="$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")
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x1c3c42, 0x0)
write(0xffffffffffffffff, &(0x7f0000004200)="74efc4c419fdb8d66b12a7bbf371d056ad6f01e9762d70401d1c9d331b48b925e9e6a7759abb206b9b18bfc3f3f96adb2b37c2121ef21e91bac768dd33df29649da1d82e826a55c4d620b6f502daee26004b741c951d528d806efbe00c439f2df46d3adf8be24e280b948a49afd17d56437c6e752d84f99bf37a88f0c54488dd13b848f2381d7d2aecb68ed16762e4a3c1a847565364b9f1af92c9c89e06e89fe6179cb7078a742cb968a9f09cc690dc473df29d6ad9af5879e9a2618c63702117a3a63d3a4236baee86f5f452e9663a795306dabb97db884348ab437bdc13b7cfb03eff1cf216f0", 0xe8)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0xef)
write$cgroup_type(r5, &(0x7f0000000200), 0x175d900f)
getegid()
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x91, &(0x7f00000008c0)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x127b, 0x0)

03:23:54 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = gettid()
sched_setaffinity(r3, 0x8, &(0x7f0000002280)=0x2ac)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000100000000000080e1695"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r4}, 0x10)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)}, {&(0x7f00000007c0)}, {&(0x7f0000000800)}], 0x3, &(0x7f0000002780)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRESHEX=r0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00$\x00\x00\x00', @ANYRES32, @ANYRES64, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32], 0x140}, 0x4000001)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lseek(0xffffffffffffffff, 0x100, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000800)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[])
utimes(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000440)={{0x77359400}, {0x77359400}})
mkdir(&(0x7f00000002c0)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000780)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0'])
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/snmp6\x00')

03:23:54 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2578.644587][T31776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2578.675013][T31780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2584.114494][T31783] overlayfs: missing 'lowerdir'
[ 2584.719935][T31782] overlayfs: missing 'lowerdir'
03:24:00 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = gettid()
sched_setaffinity(r3, 0x8, &(0x7f0000002280)=0x2ac)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000100000000000080e1695"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r4}, 0x10)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)}, {&(0x7f00000007c0)}, {&(0x7f0000000800)}], 0x3, &(0x7f0000002780)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRESHEX=r0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00$\x00\x00\x00', @ANYRES32, @ANYRES64, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32], 0x140}, 0x4000001)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lseek(0xffffffffffffffff, 0x100, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000800)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[])
utimes(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000440)={{0x77359400}, {0x77359400}})
mkdir(&(0x7f00000002c0)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000780)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0'])
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/snmp6\x00')

[ 2584.868805][ T3580] Bluetooth: hci4: command 0x040f tx timeout
03:24:00 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = gettid()
sched_setaffinity(r3, 0x8, &(0x7f0000002280)=0x2ac)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000100000000000080e1695"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r4}, 0x10)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)}, {&(0x7f00000007c0)}, {&(0x7f0000000800)}], 0x3, &(0x7f0000002780)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRESHEX=r0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00$\x00\x00\x00', @ANYRES32, @ANYRES64, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32], 0x140}, 0x4000001)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lseek(0xffffffffffffffff, 0x100, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000800)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[])
utimes(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000440)={{0x77359400}, {0x77359400}})
mkdir(&(0x7f00000002c0)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000780)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0'])
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/snmp6\x00')

03:24:00 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:24:00 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = gettid()
sched_setaffinity(r3, 0x8, &(0x7f0000002280)=0x2ac)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000100000000000080e1695"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r4}, 0x10)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)}, {&(0x7f00000007c0)}, {&(0x7f0000000800)}], 0x3, &(0x7f0000002780)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRESHEX=r0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00$\x00\x00\x00', @ANYRES32, @ANYRES64, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32], 0x140}, 0x4000001)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lseek(0xffffffffffffffff, 0x100, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000800)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[])
utimes(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000440)={{0x77359400}, {0x77359400}})
mkdir(&(0x7f00000002c0)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000780)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0'])
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/snmp6\x00')

03:24:00 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = gettid()
sched_setaffinity(r3, 0x8, &(0x7f0000002280)=0x2ac)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000100000000000080e1695"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r4}, 0x10)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)}, {&(0x7f00000007c0)}, {&(0x7f0000000800)}], 0x3, &(0x7f0000002780)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRESHEX=r0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00$\x00\x00\x00', @ANYRES32, @ANYRES64, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32], 0x140}, 0x4000001)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lseek(0xffffffffffffffff, 0x100, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000800)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[])
utimes(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000440)={{0x77359400}, {0x77359400}})
mkdir(&(0x7f00000002c0)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000780)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0'])
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/snmp6\x00')

03:24:00 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {0x4800}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2584.971829][T31794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2585.037367][T31798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2585.231934][T31803] overlayfs: missing 'lowerdir'
[ 2585.259726][T31798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2586.015563][T31807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2586.083077][T31808] overlayfs: missing 'lowerdir'
03:24:01 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = gettid()
sched_setaffinity(r3, 0x8, &(0x7f0000002280)=0x2ac)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000100000000000080e1695"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r4}, 0x10)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)}, {&(0x7f00000007c0)}, {&(0x7f0000000800)}], 0x3, &(0x7f0000002780)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRESHEX=r0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00$\x00\x00\x00', @ANYRES32, @ANYRES64, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32], 0x140}, 0x4000001)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lseek(0xffffffffffffffff, 0x100, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000800)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[])
utimes(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000440)={{0x77359400}, {0x77359400}})
mkdir(&(0x7f00000002c0)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000780)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0'])
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/snmp6\x00')

03:24:01 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x2, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2586.318910][T31807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2586.437805][T31807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:24:02 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = gettid()
sched_setaffinity(r3, 0x8, &(0x7f0000002280)=0x2ac)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000100000000000080e1695"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r4}, 0x10)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)}, {&(0x7f00000007c0)}, {&(0x7f0000000800)}], 0x3, &(0x7f0000002780)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRESHEX=r0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00$\x00\x00\x00', @ANYRES32, @ANYRES64, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32], 0x140}, 0x4000001)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lseek(0xffffffffffffffff, 0x100, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000800)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[])
utimes(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000440)={{0x77359400}, {0x77359400}})
mkdir(&(0x7f00000002c0)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000780)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0'])
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/snmp6\x00')

[ 2586.557411][T31817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2588.051859][T31818] overlayfs: missing 'lowerdir'
[ 2588.073256][ T3580] Bluetooth: hci4: command 0x0419 tx timeout
03:24:04 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = gettid()
sched_setaffinity(r3, 0x8, &(0x7f0000002280)=0x2ac)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000100000000000080e1695"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r4}, 0x10)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)}, {&(0x7f00000007c0)}, {&(0x7f0000000800)}], 0x3, &(0x7f0000002780)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRESHEX=r0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00$\x00\x00\x00', @ANYRES32, @ANYRES64, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32], 0x140}, 0x4000001)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lseek(0xffffffffffffffff, 0x100, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000800)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[])
utimes(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000440)={{0x77359400}, {0x77359400}})
mkdir(&(0x7f00000002c0)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000780)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0'])
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/snmp6\x00')

03:24:04 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {0x4c00}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:24:05 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)})

[ 2589.458816][T31817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2589.591546][T31831] overlayfs: missing 'lowerdir'
[ 2589.883154][T31835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2590.409541][T31838] overlayfs: missing 'lowerdir'
[ 2590.451765][T31817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2590.720434][T31835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:24:07 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = gettid()
sched_setaffinity(r3, 0x8, &(0x7f0000002280)=0x2ac)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000100000000000080e1695"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r4}, 0x10)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)}, {&(0x7f00000007c0)}, {&(0x7f0000000800)}], 0x3, &(0x7f0000002780)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRESHEX=r0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00$\x00\x00\x00', @ANYRES32, @ANYRES64, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32], 0x140}, 0x4000001)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lseek(0xffffffffffffffff, 0x100, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000800)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[])
utimes(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000440)={{0x77359400}, {0x77359400}})
mkdir(&(0x7f00000002c0)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000780)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0'])
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/snmp6\x00')

[ 2591.772932][T31845] overlayfs: missing 'lowerdir'
03:24:07 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = gettid()
sched_setaffinity(r3, 0x8, &(0x7f0000002280)=0x2ac)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000100000000000080e1695"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r4}, 0x10)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)}, {&(0x7f00000007c0)}, {&(0x7f0000000800)}], 0x3, &(0x7f0000002780)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRESHEX=r0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00$\x00\x00\x00', @ANYRES32, @ANYRES64, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32], 0x140}, 0x4000001)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lseek(0xffffffffffffffff, 0x100, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000800)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[])
utimes(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000440)={{0x77359400}, {0x77359400}})
mkdir(&(0x7f00000002c0)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000780)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0'])
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/snmp6\x00')

03:24:07 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./bus\x00', 0x0, 0x2088, 0x0)

03:24:07 executing program 4:
r0 = socket(0x1d, 0x3, 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0x0)

03:24:07 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b70000000000000007000000020000009500000000000000557f6b32554d5a7f32554ec9905d1e5286574356940658273ad1326fc65be4b1037a74cfb5af100fc4e94d123d9b22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a66a5316f68f7617859f06c8efd5da6abe44613150c7e649c322209b1af93c6c396058168ad0a70992124d19c7c9cc22ff9a6b1a058039ab938480e8697f8715bcbc15ef93edaf418e1fd0773b640b33c43a3ffff92ec8bbdafd7724198270217133caa104338e1af40f29cfcf0836aa3b190180caafbf8cfca720074bdcc7cbd978efd8404a1c7788cd0a5d97899514e64e36cad5eba82010b2d149ac02e5f070000000000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195}, 0x48)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x44, &(0x7f00000012c0), 0x4)

03:24:07 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195}, 0x48)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x44, &(0x7f00000012c0), 0x4)

03:24:07 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195}, 0x48)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x44, &(0x7f00000012c0), 0x4)

[ 2592.497950][T31863] overlayfs: missing 'lowerdir'
[ 2593.756395][T31870] overlayfs: missing 'lowerdir'
[ 2594.169013][T30296] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2594.366278][T30296] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2594.487026][T30296] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2594.639755][T30296] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2595.217646][ T1253] ieee802154 phy0 wpan0: encryption failed: -22
[ 2595.224588][ T1253] ieee802154 phy1 wpan1: encryption failed: -22
[ 2595.879668][T30296] device hsr_slave_0 left promiscuous mode
[ 2595.905762][T30296] device hsr_slave_1 left promiscuous mode
[ 2595.921451][T30296] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2595.951021][T30296] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2595.963793][T30296] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2595.985217][T30296] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2596.024388][T30296] device bridge_slave_1 left promiscuous mode
[ 2596.030904][T30296] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2596.066053][T30296] device bridge_slave_0 left promiscuous mode
[ 2596.088044][T30296] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2596.146366][T30296] device veth1_macvtap left promiscuous mode
[ 2596.152572][T30296] device veth0_macvtap left promiscuous mode
[ 2596.184474][T30296] device veth1_vlan left promiscuous mode
[ 2596.190443][T30296] device veth0_vlan left promiscuous mode
[ 2596.613500][T21395] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2596.634692][T21395] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2596.647253][T21395] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2596.658975][T21395] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 2596.669544][T21395] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2596.835854][T30296] team0 (unregistering): Port device team_slave_1 removed
[ 2596.852438][T30296] team0 (unregistering): Port device team_slave_0 removed
[ 2596.875342][T30296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2596.892936][T30296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2596.991735][T30296] bond0 (unregistering): Released all slaves
[ 2597.349783][T31902] chnl_net:caif_netlink_parms(): no params data found
[ 2597.529375][T31902] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2597.541221][T31902] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2597.553743][T31902] device bridge_slave_0 entered promiscuous mode
[ 2597.566677][T31902] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2597.573887][T31902] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2597.593796][T31902] device bridge_slave_1 entered promiscuous mode
[ 2597.786790][T31902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2597.844839][T31902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2597.935819][T31902] team0: Port device team_slave_0 added
[ 2597.955310][T31902] team0: Port device team_slave_1 added
[ 2598.056803][T31902] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2598.063896][T31902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2598.146332][T31902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2598.185842][T31902] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2598.192844][T31902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2598.274164][T31902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2598.325811][ T3580] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 2598.345149][ T3580] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 2598.355645][T16923] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 2598.369606][T16923] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 2598.377325][T16923] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 2598.385135][T16923] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 2598.446059][T31902] device hsr_slave_0 entered promiscuous mode
[ 2598.453323][T31902] device hsr_slave_1 entered promiscuous mode
[ 2598.468453][T31902] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2598.494373][T31902] Cannot create hsr debugfs directory
[ 2598.734444][T16923] Bluetooth: hci4: command 0x0409 tx timeout
[ 2599.471768][T31928] chnl_net:caif_netlink_parms(): no params data found
[ 2599.730739][T31928] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2599.744423][T31928] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2599.774968][T31928] device bridge_slave_0 entered promiscuous mode
[ 2599.815804][T31928] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2599.823051][T31928] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2599.841347][T31928] device bridge_slave_1 entered promiscuous mode
[ 2599.877722][T31902] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2599.951722][T31902] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2599.970013][T31928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2599.980366][T31902] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2599.997968][T31928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2600.016697][T31902] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2600.083735][T31928] team0: Port device team_slave_0 added
[ 2600.114380][T31928] team0: Port device team_slave_1 added
[ 2600.218394][T31928] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2600.226791][T31928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2600.264468][T31928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2600.312844][T31928] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2600.336340][T31928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2600.367320][T31928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2600.450178][T31928] device hsr_slave_0 entered promiscuous mode
[ 2600.470098][T31928] device hsr_slave_1 entered promiscuous mode
[ 2600.490472][T31928] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2600.504774][T16923] Bluetooth: hci5: command 0x0409 tx timeout
[ 2600.512623][T31928] Cannot create hsr debugfs directory
[ 2600.600607][T30296] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2600.660042][T31902] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2600.747018][T30296] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2600.799893][T31902] 8021q: adding VLAN 0 to HW filter on device team0
[ 2600.814333][T16923] Bluetooth: hci4: command 0x041b tx timeout
[ 2600.824223][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2600.832250][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2600.895158][T30296] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2600.969276][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2600.995749][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2601.035331][ T8472] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2601.043083][ T8472] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2601.105174][T30296] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2601.136080][T22272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2601.155650][T22272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2601.178876][T22272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2601.189397][T22272] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2601.197198][T22272] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2601.235050][T22272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2601.246244][T22272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2601.257721][T22272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2601.283605][T22272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2601.315794][T22272] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2601.330257][T22272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2601.340810][T22272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2601.351612][T22272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2601.362101][T22272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2601.378805][T31902] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2601.408853][T31902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2601.421797][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2601.432569][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2602.045321][T22270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2602.053847][T22270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2602.111524][T31902] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2602.236278][T22270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2602.247381][T22270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2602.293581][T31902] device veth0_vlan entered promiscuous mode
[ 2602.352557][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2602.364739][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2602.378562][T31902] device veth1_vlan entered promiscuous mode
[ 2602.424396][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2602.433635][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2602.443919][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2602.555863][T22270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2602.574757][T16923] Bluetooth: hci5: command 0x041b tx timeout
[ 2602.584426][T21991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2602.593224][T21991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2602.618780][T31902] device veth0_macvtap entered promiscuous mode
[ 2602.675358][T31902] device veth1_macvtap entered promiscuous mode
[ 2602.791442][T31902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2602.815832][T31902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2602.832664][T31902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2602.852086][T31902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2602.862164][T31902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2602.883390][T31902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2602.894498][T16923] Bluetooth: hci4: command 0x040f tx timeout
[ 2602.911405][T31902] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2602.954472][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2602.962967][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2602.980152][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2602.989313][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2603.003731][T31902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2603.026267][T31902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2603.054310][T31902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2603.074238][T31902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2603.090563][T31902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2603.114741][T31902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2603.142806][T31902] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2603.201789][T30296] device hsr_slave_0 left promiscuous mode
[ 2603.213199][T30296] device hsr_slave_1 left promiscuous mode
[ 2603.228682][T30296] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2603.238854][T30296] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2603.250860][T30296] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2603.259366][T30296] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2603.270322][T30296] device bridge_slave_1 left promiscuous mode
[ 2603.278423][T30296] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2603.300552][T30296] device bridge_slave_0 left promiscuous mode
[ 2603.312613][T30296] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2603.338214][T30296] device veth1_macvtap left promiscuous mode
[ 2603.350064][T30296] device veth0_macvtap left promiscuous mode
[ 2603.359164][T30296] device veth1_vlan left promiscuous mode
[ 2603.370709][T30296] device veth0_vlan left promiscuous mode
[ 2603.779984][T30296] team0 (unregistering): Port device team_slave_1 removed
[ 2603.797858][T30296] team0 (unregistering): Port device team_slave_0 removed
[ 2603.812672][T30296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2603.843689][T30296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2603.986575][T30296] bond0 (unregistering): Released all slaves
[ 2604.042152][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2604.051614][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2604.066770][T31902] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2604.076821][T31902] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2604.087166][T31902] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2604.097112][T31902] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2604.110172][T31928] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2604.126886][T31928] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2604.151208][T31928] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2604.189924][T31928] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2604.387262][T30442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2604.444423][T30442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2604.488753][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2604.533733][T30309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2604.564749][T30309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2604.584977][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2604.602718][T31928] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2604.654580][T16923] Bluetooth: hci5: command 0x040f tx timeout
[ 2604.686832][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2604.701932][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2604.727062][T31928] 8021q: adding VLAN 0 to HW filter on device team0
[ 2604.792244][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2604.804926][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2604.815997][ T8472] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2604.823769][ T8472] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2604.856698][T19423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2604.886968][T19423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2604.897514][T19423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2604.921160][T32012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2604.933213][T19423] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2604.940983][T19423] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2604.974376][T16923] Bluetooth: hci4: command 0x0419 tx timeout
[ 2605.012929][T19423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2605.037448][T32012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2605.053572][T19423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2605.096070][T19423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2605.136858][T19423] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2605.168899][T32012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2605.186283][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2605.206044][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2605.229335][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2605.254404][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2605.266607][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2605.285261][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2605.304557][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2605.326594][T31928] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
03:24:21 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:24:21 executing program 2:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195}, 0x48)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x44, &(0x7f00000012c0), 0x4)

03:24:21 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b70000000000000007000000020000009500000000000000557f6b32554d5a7f32554ec9905d1e5286574356940658273ad1326fc65be4b1037a74cfb5af100fc4e94d123d9b22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a66a5316f68f7617859f06c8efd5da6abe44613150c7e649c322209b1af93c6c396058168ad0a70992124d19c7c9cc22ff9a6b1a058039ab938480e8697f8715bcbc15ef93edaf418e1fd0773b640b33c43a3ffff92ec8bbdafd7724198270217133caa104338e1af40f29cfcf0836aa3b190180caafbf8cfca720074bdcc7cbd978efd8404a1c7788cd0a5d97899514e64e36cad5eba82010b2d149ac02e5f070000000000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195}, 0x48)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x44, &(0x7f00000012c0), 0x4)

[ 2605.699419][T32033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2605.737597][T22270] wlan1: authenticate with 08:02:11:00:00:00
[ 2605.756747][T22270] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2605.807996][T32033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2605.844241][T30309] wlan1: authenticated
[ 2605.849173][T22270] mac80211_hwsim hwsim93 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
[ 2605.884288][T30309] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[ 2605.885073][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2605.908778][T30442] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[ 2605.909174][T32033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2605.925229][T30442] wlan1: associated
[ 2605.948377][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2605.979939][T31928] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2606.736471][T16923] Bluetooth: hci5: command 0x0419 tx timeout
[ 2606.846837][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2606.863387][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2606.881788][T31928] device veth0_vlan entered promiscuous mode
[ 2606.932271][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2606.941721][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2606.957743][T31928] device veth1_vlan entered promiscuous mode
[ 2607.014344][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2607.022375][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2607.038602][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2607.051263][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2607.085373][T31928] device veth0_macvtap entered promiscuous mode
[ 2607.094792][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2607.103578][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2607.115314][T31928] device veth1_macvtap entered promiscuous mode
[ 2607.133341][T31928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2607.187635][T31928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2607.214130][T31928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2607.243876][T31928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2607.262063][T31928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2607.272686][T31928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2607.291997][T31928] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2607.327326][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2607.336381][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2607.344783][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2607.353815][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2607.365791][T31928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2607.381092][T31928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2607.391535][T31928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2607.402063][T31928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2607.412122][T31928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2607.422986][T31928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2607.437755][T31928] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2607.447310][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2607.456783][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2607.476733][T31928] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2607.487697][T31928] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2607.497163][T31928] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2607.507566][T31928] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2607.629957][T30309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2607.653475][T30309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2607.664907][T30442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2607.673768][T30442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2607.690964][T22270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2607.700008][T22270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2607.773293][T32052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2607.817730][T29723] wlan1: authenticate with 08:02:11:00:00:00
[ 2607.840254][T29723] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2607.841659][T32053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2607.848572][T30296] wlan1: authenticated
[ 2607.876185][T29723] mac80211_hwsim hwsim95 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
[ 2607.894991][T30309] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[ 2607.912442][T30296] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[ 2607.912756][T32052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2607.927998][T30296] wlan1: associated
03:24:23 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {0x6000}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:24:23 executing program 1:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x150, &(0x7f0000000240)="$eJzs281KOlEYx/Hf+P7334tlbaKF0KI2Oan04q4uRXQSaSzJNkoQXUr3V1A3kOGgJxyFwNBDzvezen4+HHxmcfTZjABEVkEFOXKUHIb9TO4p79geCcCSDCR9DgBEU/zd9gQA7Hi7kjqSXj8e64onp/aDYf9y3I+lpvvP0l5i1HfSyoT3ixfpcHze+TfzfNb0szP7Rwfj7/+vNa1rQ5vKaUvbo37DnN/95TYERIujYjhPfBDTdcv3TkxOBrlkcirI5VCumJwOcrF+5zcW9QgA5hT74f7HQ/c/Ebr/AP6ubq9/U/N9756CgoLCFLZ/mQAsmvvQ7rjdXv+41a41vaZ3W74oV88qp6Xzqhts/u7k/g9gdXz/6dueBAAAAAAAAAAAAAAAzCuvHdsjAAAAAFiSZbxOZPsZAQAAAAAAAAAAAAAAAAAAgFXxFQAA//+KWyUw")

03:24:23 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = gettid()
sched_setaffinity(r3, 0x8, &(0x7f0000002280)=0x2ac)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000100000000000080e1695"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r4}, 0x10)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)}, {&(0x7f00000007c0)}, {&(0x7f0000000800)}], 0x3, &(0x7f0000002780)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRESHEX=r0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00$\x00\x00\x00', @ANYRES32, @ANYRES64, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32], 0x140}, 0x4000001)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lseek(0xffffffffffffffff, 0x100, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000800)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[])
utimes(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000440)={{0x77359400}, {0x77359400}})
mkdir(&(0x7f00000002c0)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000780)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0'])
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/snmp6\x00')

03:24:23 executing program 4:
r0 = socket(0x200000000000011, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, <r3=>0x0}, &(0x7f0000000100)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x28}], {0x95, 0x0, 0x4c}}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x1006, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed6}, 0x56)

03:24:23 executing program 2:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b70000000000000007000000020000009500000000000000557f6b32554d5a7f32554ec9905d1e5286574356940658273ad1326fc65be4b1037a74cfb5af100fc4e94d123d9b22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a66a5316f68f7617859f06c8efd5da6abe44613150c7e649c322209b1af93c6c396058168ad0a70992124d19c7c9cc22ff9a6b1a058039ab938480e8697f8715bcbc15ef93edaf418e1fd0773b640b33c43a3ffff92ec8bbdafd7724198270217133caa104338e1af40f29cfcf0836aa3b190180caafbf8cfca720074bdcc7cbd978efd8404a1c7788cd0a5d97899514e64e36cad5eba82010b2d149ac02e5f070000000000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195}, 0x48)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x44, &(0x7f00000012c0), 0x4)

03:24:23 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x4, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2608.294939][T32060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2608.412902][T32066] overlayfs: missing 'lowerdir'
03:24:24 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg$inet(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x0, @local}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000340)='x', 0x1}], 0x1, &(0x7f0000001500)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x0)

[ 2608.860157][T32069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:24:24 executing program 2:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195}, 0x48)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x44, &(0x7f00000012c0), 0x4)

[ 2608.934930][T32070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2609.021961][T32060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:24:24 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg$inet(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x0, @local}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000340)='x', 0x1}], 0x1, &(0x7f0000001500)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x0)

[ 2609.067973][T32070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:24:24 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@newqdisc={0x98, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x68, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x99, 0x0, 0x0, 0x5}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}]}]}}}]}, 0x98}}, 0x0)

[ 2609.165000][T32070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:24:24 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg$inet(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x0, @local}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000340)='x', 0x1}], 0x1, &(0x7f0000001500)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x0)

[ 2609.310049][T32080] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
03:24:24 executing program 0:
syz_io_uring_setup(0x3833, &(0x7f0000000100), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xd3, 0x0)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9)

03:24:25 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {0x6800}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:24:25 executing program 4:
r0 = socket(0x200000000000011, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, <r3=>0x0}, &(0x7f0000000100)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x28}], {0x95, 0x0, 0x4c}}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x1006, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed6}, 0x56)

03:24:25 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg$inet(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x0, @local}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000340)='x', 0x1}], 0x1, &(0x7f0000001500)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x0)

03:24:25 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x5, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:24:25 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@newqdisc={0x98, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x68, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x99, 0x0, 0x0, 0x5}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}]}]}}}]}, 0x98}}, 0x0)

[ 2609.562835][T32090] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
03:24:25 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@newqdisc={0x98, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x68, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x99, 0x0, 0x0, 0x5}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}]}]}}}]}, 0x98}}, 0x0)

03:24:25 executing program 4:
r0 = socket(0x200000000000011, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, <r3=>0x0}, &(0x7f0000000100)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x28}], {0x95, 0x0, 0x4c}}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x1006, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed6}, 0x56)

03:24:25 executing program 0:
syz_io_uring_setup(0x3833, &(0x7f0000000100), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xd3, 0x0)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9)

03:24:25 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@newqdisc={0x98, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x68, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x99, 0x0, 0x0, 0x5}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}]}]}}}]}, 0x98}}, 0x0)

03:24:25 executing program 4:
r0 = socket(0x200000000000011, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, <r3=>0x0}, &(0x7f0000000100)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x28}], {0x95, 0x0, 0x4c}}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x1006, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed6}, 0x56)

[ 2609.693617][T32092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2609.697780][T32099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2609.727716][T32100] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2609.787670][T32099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2609.803088][T32092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:24:25 executing program 0:
syz_io_uring_setup(0x3833, &(0x7f0000000100), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xd3, 0x0)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9)

[ 2609.841422][T32108] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
03:24:25 executing program 4:
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="646973636172642c0008fd346f1fe0c7000000000321cb98b0dfc801ecf9a8"], 0x1, 0x559d, &(0x7f0000005680)="$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")
r0 = open(&(0x7f0000000380)='./file1\x00', 0x143042, 0x0)
ftruncate(r0, 0x2007ffb)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[], 0x78)
creat(&(0x7f0000000040)='./bus\x00', 0x0)

[ 2609.885539][T32096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2609.897469][T32109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:24:25 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {0x6c00}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:24:25 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@newqdisc={0x98, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x68, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x99, 0x0, 0x0, 0x5}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}]}]}}}]}, 0x98}}, 0x0)

03:24:25 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@newqdisc={0x98, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x68, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x99, 0x0, 0x0, 0x5}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}]}]}}}]}, 0x98}}, 0x0)

03:24:25 executing program 0:
syz_io_uring_setup(0x3833, &(0x7f0000000100), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xd3, 0x0)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9)

03:24:25 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x6, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:24:25 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = dup(r0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x34, 0xa, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}]}, 0x34}}, 0x0)

[ 2610.320568][T32122] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2610.398138][T32119] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
03:24:26 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = dup(r0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x34, 0xa, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}]}, 0x34}}, 0x0)

[ 2610.467092][T32131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2610.468059][T32132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2610.537073][T32131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:24:26 executing program 2:
signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0)
r0 = syz_io_uring_setup(0x286b, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
pipe(&(0x7f0000000080))
openat$procfs(0xffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0)
syz_open_dev$vbi(&(0x7f0000000540), 0x1, 0x2)
syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1e002000)

03:24:26 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000fc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x4, 0xa, 0x101}], {0x14}}, 0x3c}}, 0x0)

03:24:26 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@newqdisc={0x98, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x68, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x99, 0x0, 0x0, 0x5}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}]}]}}}]}, 0x98}}, 0x0)

03:24:26 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = dup(r0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x34, 0xa, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}]}, 0x34}}, 0x0)

[ 2610.608057][T32124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2610.620633][T32123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:24:26 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = dup(r0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x34, 0xa, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}]}, 0x34}}, 0x0)

[ 2610.695885][T32140] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2610.718936][T32123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:24:26 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {0x7400}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:24:26 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000fc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x4, 0xa, 0x101}], {0x14}}, 0x3c}}, 0x0)

03:24:26 executing program 2:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=@newlinkprop={0x20}, 0x20}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xe, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0)
r5 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d006d54007a08b267ae3604b5000000", @ANYRES32=r4, @ANYBLOB="00080080000000000800f1ff"], 0x24}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0)

03:24:26 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x18fe2a01ed25d92f, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x2c}}, 0x0)

03:24:26 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x7, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2611.030691][T32151] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
03:24:26 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x60}}, 0x0)

03:24:26 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x18fe2a01ed25d92f, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x2c}}, 0x0)

03:24:26 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000fc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x4, 0xa, 0x101}], {0x14}}, 0x3c}}, 0x0)

03:24:26 executing program 2:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=@newlinkprop={0x20}, 0x20}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xe, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0)
r5 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d006d54007a08b267ae3604b5000000", @ANYRES32=r4, @ANYBLOB="00080080000000000800f1ff"], 0x24}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0)

03:24:26 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x60}}, 0x0)

03:24:26 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000fc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x4, 0xa, 0x101}], {0x14}}, 0x3c}}, 0x0)

03:24:26 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x18fe2a01ed25d92f, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x2c}}, 0x0)

[ 2611.131542][T32153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2611.170020][T32160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2611.235472][T32153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2611.242342][T32169] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2611.261547][T32171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2611.314207][T32153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2611.357147][T32160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:24:27 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {0x7a00}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:24:27 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x60}}, 0x0)

03:24:27 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x18fe2a01ed25d92f, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x2c}}, 0x0)

03:24:27 executing program 2:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=@newlinkprop={0x20}, 0x20}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xe, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0)
r5 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d006d54007a08b267ae3604b5000000", @ANYRES32=r4, @ANYBLOB="00080080000000000800f1ff"], 0x24}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0)

03:24:27 executing program 4:
r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket(0x25, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40001}, 0x0)
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x2)

03:24:27 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x8, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2611.677220][T32177] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
03:24:27 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x60}}, 0x0)

03:24:27 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x402402, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x0)
syz_io_uring_setup(0x4aa8, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000d6000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)=<r2=>0x0)
syz_open_dev$vcsu(0x0, 0x5, 0x262000)
syz_io_uring_submit(0x0, r2, 0x0, 0x6)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_open_dev$sndmidi(0x0, 0x0, 0x0)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe73)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f00000000c0), 0x12)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(r7, &(0x7f0000000280)='gid_map\x00')
write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {0x0, 0x21}, {}, @raw32={[0x2200]}}], 0xffc8)

03:24:27 executing program 4:
r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket(0x25, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40001}, 0x0)
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x2)

03:24:27 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe(&(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
recvmmsg(r6, &(0x7f0000001140)=[{{0x0, 0x500000, 0x0}}], 0x700, 0x0, 0x0)
write$binfmt_misc(r4, &(0x7f0000000340)=ANY=[], 0xffc1)
splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0)

03:24:27 executing program 1:
r0 = socket$inet(0x2, 0x2000080001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10)
sendto$inet(r0, &(0x7f0000000300)="99", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10)
setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x8, 0x0, 0x0)

03:24:27 executing program 4:
r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket(0x25, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40001}, 0x0)
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x2)

[ 2611.896100][T32186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2611.907514][T32197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2611.993730][T32186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2612.004040][T32183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2613.207664][T32186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2613.226396][T32183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:24:29 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:24:29 executing program 2:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=@newlinkprop={0x20}, 0x20}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xe, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0)
r5 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d006d54007a08b267ae3604b5000000", @ANYRES32=r4, @ANYBLOB="00080080000000000800f1ff"], 0x24}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0)

03:24:29 executing program 4:
r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket(0x25, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40001}, 0x0)
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x2)

03:24:29 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe(&(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
recvmmsg(r6, &(0x7f0000001140)=[{{0x0, 0x500000, 0x0}}], 0x700, 0x0, 0x0)
write$binfmt_misc(r4, &(0x7f0000000340)=ANY=[], 0xffc1)
splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0)

03:24:29 executing program 1:
r0 = socket$inet(0x2, 0x2000080001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10)
sendto$inet(r0, &(0x7f0000000300)="99", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10)
setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x8, 0x0, 0x0)

03:24:29 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x9, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2613.729410][T32221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:24:29 executing program 4:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000100)={{0x3, 0x0, 0x1, 0x0, 0x10000}})

[ 2613.999394][T32221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2614.189373][T32225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:24:29 executing program 2:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3b00, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xc}], &(0x7f00000000c0)='GPL\x00', 0x2, 0x95, &(0x7f0000000100)=""/149, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[ 2614.330825][T32221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:24:30 executing program 1:
r0 = socket$inet(0x2, 0x2000080001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10)
sendto$inet(r0, &(0x7f0000000300)="99", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10)
setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x8, 0x0, 0x0)

03:24:30 executing program 4:
r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)=@multiplanar_userptr={0x0, 0x4, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "374f571b"}, 0x0, 0x2, {0x0}})

[ 2614.574216][T32225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:24:30 executing program 2:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3b00, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xc}], &(0x7f00000000c0)='GPL\x00', 0x2, 0x95, &(0x7f0000000100)=""/149, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[ 2614.671882][T32225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:24:30 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e)
connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e)
syz_emit_ethernet(0x82, &(0x7f0000002840)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb886445f003"], 0x0)

03:24:30 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b={0x4}, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:24:30 executing program 2:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3b00, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xc}], &(0x7f00000000c0)='GPL\x00', 0x2, 0x95, &(0x7f0000000100)=""/149, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

03:24:30 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e)
connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e)
syz_emit_ethernet(0x82, &(0x7f0000002840)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb886445f003"], 0x0)

[ 2615.022492][T32246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:24:30 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe(&(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
recvmmsg(r6, &(0x7f0000001140)=[{{0x0, 0x500000, 0x0}}], 0x700, 0x0, 0x0)
write$binfmt_misc(r4, &(0x7f0000000340)=ANY=[], 0xffc1)
splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0)

03:24:30 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0xa, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:24:30 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e)
connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e)
syz_emit_ethernet(0x82, &(0x7f0000002840)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb886445f003"], 0x0)

03:24:30 executing program 2:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3b00, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xc}], &(0x7f00000000c0)='GPL\x00', 0x2, 0x95, &(0x7f0000000100)=""/149, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[ 2615.199233][T32246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2615.209476][T32252] wlan1: authenticate with 08:02:11:00:00:00
[ 2615.213735][T32252] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2615.266476][T32252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2615.306178][T32247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2615.354444][T30407] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
03:24:31 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'dummy0\x00'}}, 0x1e)
connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @remote, 'gretap0\x00'}}, 0x1e)
syz_emit_ethernet(0x82, &(0x7f0000002840)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb886445f003"], 0x0)

03:24:31 executing program 1:
r0 = socket$inet(0x2, 0x2000080001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10)
sendto$inet(r0, &(0x7f0000000300)="99", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10)
setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x8, 0x0, 0x0)

[ 2615.652326][T32252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2615.914638][T32252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:24:31 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r2 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
tkill(r2, 0xb)
fsmount(r1, 0x0, 0x0)
fsmount(r1, 0x0, 0x0)

03:24:31 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b={0x10}, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:24:31 executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
ioctl(0xffffffffffffffff, 0x2, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000b40)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x400, 0x0, 0x4, 0x830, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x40, 0x0, 0x2}, 0x48)
ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000000280)={0x1, 0x101})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2616.283262][T29723] libceph: connect (1)[c::]:6789 error -101
[ 2616.298175][T29723] libceph: mon0 (1)[c::]:6789 connect error
[ 2616.305847][T32273] wlan1: authenticate with 08:02:11:00:00:00
[ 2616.326942][T32269] ceph: No mds server is up or the cluster is laggy
[ 2616.393469][T32273] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2616.412010][T32277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:24:32 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0xb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:24:32 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r2 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
tkill(r2, 0xb)
fsmount(r1, 0x0, 0x0)
fsmount(r1, 0x0, 0x0)

[ 2616.494217][T30296] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
03:24:32 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r2 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
tkill(r2, 0xb)
fsmount(r1, 0x0, 0x0)
fsmount(r1, 0x0, 0x0)

[ 2616.604258][T30296] wlan1: authentication with 08:02:11:00:00:00 timed out
[ 2616.613539][T30460] wlan1: authenticated
[ 2616.618246][T32273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2616.635691][T21994] mac80211_hwsim hwsim95 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
[ 2616.674787][T30296] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
03:24:32 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe(&(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
recvmmsg(r6, &(0x7f0000001140)=[{{0x0, 0x500000, 0x0}}], 0x700, 0x0, 0x0)
write$binfmt_misc(r4, &(0x7f0000000340)=ANY=[], 0xffc1)
splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0)

[ 2616.719607][T32282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2616.734653][T32273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2616.736390][T30296] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[ 2616.772883][T30296] wlan1: associated
[ 2616.781109][T21994] libceph: connect (1)[c::]:6789 error -101
[ 2616.790931][T21994] libceph: mon0 (1)[c::]:6789 connect error
[ 2616.806176][T32284] ceph: No mds server is up or the cluster is laggy
[ 2616.815979][T32286] ceph: No mds server is up or the cluster is laggy
[ 2616.825409][T21994] libceph: connect (1)[c::]:6789 error -101
[ 2616.831464][T21994] libceph: mon0 (1)[c::]:6789 connect error
[ 2616.857709][T32282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:24:33 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x0, 0x0, 0x0, {0x60}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x6, "0005050000000002000000000600ffff"}}}]}, 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, 0x0}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000024000f0d000000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff"], 0x48}}, 0x0)

03:24:33 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b={0x50}, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2618.236191][T32299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:24:33 executing program 0:
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x43}, 0x10)
getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180), &(0x7f00000001c0)=0x4)

03:24:33 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r2 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
tkill(r2, 0xb)
fsmount(r1, 0x0, 0x0)
fsmount(r1, 0x0, 0x0)

[ 2618.314810][ T4279] libceph: connect (1)[c::]:6789 error -101
[ 2618.321174][ T4279] libceph: mon0 (1)[c::]:6789 connect error
03:24:33 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x0, 0x0, 0x0, {0x60}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x6, "0005050000000002000000000600ffff"}}}]}, 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, 0x0}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000024000f0d000000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff"], 0x48}}, 0x0)

03:24:33 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r2 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
tkill(r2, 0xb)
fsmount(r1, 0x0, 0x0)
fsmount(r1, 0x0, 0x0)

03:24:33 executing program 0:
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x43}, 0x10)
getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180), &(0x7f00000001c0)=0x4)

03:24:34 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x0, 0x0, 0x0, {0x60}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x6, "0005050000000002000000000600ffff"}}}]}, 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, 0x0}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000024000f0d000000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff"], 0x48}}, 0x0)

[ 2618.467198][ T4279] libceph: connect (1)[c::]:6789 error -101
[ 2618.475908][ T4279] libceph: mon0 (1)[c::]:6789 connect error
[ 2618.483590][T32311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2618.502656][T32305] ceph: No mds server is up or the cluster is laggy
03:24:34 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0xc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:24:34 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x0, 0x0, 0x0, {0x60}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x6, "0005050000000002000000000600ffff"}}}]}, 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, 0x0}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000024000f0d000000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff"], 0x48}}, 0x0)

03:24:34 executing program 0:
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x43}, 0x10)
getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180), &(0x7f00000001c0)=0x4)

03:24:34 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r2 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
tkill(r2, 0xb)
fsmount(r1, 0x0, 0x0)
fsmount(r1, 0x0, 0x0)

[ 2618.591753][T32311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2618.602414][T32316] ceph: No mds server is up or the cluster is laggy
03:24:34 executing program 0:
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x43}, 0x10)
getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180), &(0x7f00000001c0)=0x4)

[ 2618.694657][T19430] libceph: connect (1)[c::]:6789 error -101
[ 2618.701747][T19430] libceph: mon0 (1)[c::]:6789 connect error
[ 2618.751382][T32311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2618.779744][T32331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2618.810535][T19430] libceph: connect (1)[c::]:6789 error -101
[ 2618.820741][T19430] libceph: mon0 (1)[c::]:6789 connect error
[ 2618.828608][T19430] libceph: connect (1)[c::]:6789 error -101
[ 2618.835567][T19430] libceph: mon0 (1)[c::]:6789 connect error
[ 2618.846975][T32332] ceph: No mds server is up or the cluster is laggy
[ 2618.855210][T32336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2618.952291][T32336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:24:34 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b={0x58}, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:24:34 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x4148}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x8}}, 0x70}}, 0x0)

03:24:34 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x17, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x51, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48)

03:24:34 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r2 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
tkill(r2, 0xb)
fsmount(r1, 0x0, 0x0)
fsmount(r1, 0x0, 0x0)

03:24:34 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4)
sendmsg$inet6(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0xa, 0x4e20, 0x1000000080000, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@hoplimit_2292={{0x14, 0x29, 0x43, 0xfff}}], 0x18}, 0x0)

03:24:34 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x4148}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x8}}, 0x70}}, 0x0)

03:24:34 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4)
sendmsg$inet6(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0xa, 0x4e20, 0x1000000080000, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@hoplimit_2292={{0x14, 0x29, 0x43, 0xfff}}], 0x18}, 0x0)

[ 2619.147709][ T4448] libceph: connect (1)[c::]:6789 error -101
[ 2619.155100][ T4448] libceph: mon0 (1)[c::]:6789 connect error
[ 2619.181115][T32343] ceph: No mds server is up or the cluster is laggy
[ 2619.210114][T32354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:24:34 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x17, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x51, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48)

03:24:34 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x4148}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x8}}, 0x70}}, 0x0)

03:24:34 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0xd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:24:34 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4)
sendmsg$inet6(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0xa, 0x4e20, 0x1000000080000, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@hoplimit_2292={{0x14, 0x29, 0x43, 0xfff}}], 0x18}, 0x0)

[ 2619.316397][T32359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:24:34 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
getsockname(r1, &(0x7f00000000c0)=@xdp={0x2c, 0x0, <r2=>0x0}, &(0x7f0000000140)=0x80)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x30, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x3}}}]}, 0x30}}, 0x0)

[ 2619.417394][T32364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2619.431351][T32359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2619.505964][T32364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2619.567806][T32364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:24:35 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x4148}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x8}}, 0x70}}, 0x0)

03:24:35 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x17, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x51, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48)

03:24:35 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4)
sendmsg$inet6(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0xa, 0x4e20, 0x1000000080000, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@hoplimit_2292={{0x14, 0x29, 0x43, 0xfff}}], 0x18}, 0x0)

03:24:35 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b={0x8, 0x3}, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:24:35 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
getsockname(r1, &(0x7f00000000c0)=@xdp={0x2c, 0x0, <r2=>0x0}, &(0x7f0000000140)=0x80)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x30, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x3}}}]}, 0x30}}, 0x0)

03:24:35 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x17, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x51, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48)

03:24:35 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x50, r0, 0x0)
syz_io_uring_setup(0x570, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878394}, 0x9c)

03:24:35 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
getsockname(r1, &(0x7f00000000c0)=@xdp={0x2c, 0x0, <r2=>0x0}, &(0x7f0000000140)=0x80)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x30, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x3}}}]}, 0x30}}, 0x0)

03:24:35 executing program 1:
socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0), 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getpgid(r0)
syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000002240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffd}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x200, 0x20000003}, 0x10}, 0x80)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000b00), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0xc4153, r3, 0x791c2000)

03:24:35 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0xe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2619.936306][T32378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:24:35 executing program 0:
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x0}}]}, 0x2c}}, 0x0)

[ 2619.997313][T32387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:24:35 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
getsockname(r1, &(0x7f00000000c0)=@xdp={0x2c, 0x0, <r2=>0x0}, &(0x7f0000000140)=0x80)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x30, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x3}}}]}, 0x30}}, 0x0)

[ 2620.038594][T32378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2622.114833][T32387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2622.239418][T32393] __nla_validate_parse: 1 callbacks suppressed
[ 2622.239441][T32393] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
03:24:38 executing program 1:
socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0), 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getpgid(r0)
syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000002240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffd}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x200, 0x20000003}, 0x10}, 0x80)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000b00), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0xc4153, r3, 0x791c2000)

[ 2622.463051][T32387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:24:38 executing program 0:
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x0}}]}, 0x2c}}, 0x0)

03:24:38 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x50, r0, 0x0)
syz_io_uring_setup(0x570, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878394}, 0x9c)

[ 2622.707558][T32406] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
03:24:38 executing program 4:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_pin_code_reply={{}, {0x7f}}}}, 0xd)

03:24:38 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0xf, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:24:38 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b={0x8, 0x4}, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:24:38 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setscheduler(0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
io_uring_enter(r0, 0x1d32, 0x0, 0x0, &(0x7f0000000000)={[0x1002]}, 0x8)

03:24:38 executing program 0:
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x0}}]}, 0x2c}}, 0x0)

[ 2622.923562][T32414] wlan1: authenticate with 08:02:11:00:00:00
03:24:38 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setscheduler(0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
io_uring_enter(r0, 0x1d32, 0x0, 0x0, &(0x7f0000000000)={[0x1002]}, 0x8)

[ 2623.140582][T32414] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2623.169759][T32634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2623.227787][T32650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:24:41 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x50, r0, 0x0)
syz_io_uring_setup(0x570, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878394}, 0x9c)

03:24:41 executing program 1:
socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0), 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getpgid(r0)
syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000002240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffd}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x200, 0x20000003}, 0x10}, 0x80)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000b00), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0xc4153, r3, 0x791c2000)

[ 2625.955111][T30454] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
03:24:41 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b={0x8, 0x5}, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:24:41 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setscheduler(0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
io_uring_enter(r0, 0x1d32, 0x0, 0x0, &(0x7f0000000000)={[0x1002]}, 0x8)

[ 2626.382082][T32672] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
03:24:42 executing program 0:
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x0}}]}, 0x2c}}, 0x0)

[ 2626.665346][T30442] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[ 2626.778000][ T1494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2626.794427][T30309] wlan1: authentication with 08:02:11:00:00:00 timed out
03:24:42 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setscheduler(0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
io_uring_enter(r0, 0x1d32, 0x0, 0x0, &(0x7f0000000000)={[0x1002]}, 0x8)

[ 2626.898126][T21395] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[ 2627.073312][ T1494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2627.089506][T21395] Bluetooth: hci0: Injecting HCI hardware error event
[ 2627.106866][T16923] Bluetooth: hci0: hardware error 0x00
[ 2627.146831][ T1067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:24:42 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x50, r0, 0x0)
syz_io_uring_setup(0x570, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878394}, 0x9c)

[ 2627.399800][ T1377] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2630.506034][T16923] Bluetooth: hci0: Opcode 0x c03 failed: -110
[ 2632.183364][T30460] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2632.300863][T30460] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2632.392003][T30460] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2632.481917][T30460] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2632.902599][T21395] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2632.914671][T21395] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2632.925866][T21395] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2632.948396][T21395] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2632.957142][T21395] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 2632.966644][T21395] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2633.227386][ T2421] chnl_net:caif_netlink_parms(): no params data found
[ 2633.361631][ T2421] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2633.369889][ T2421] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2633.380212][ T2421] device bridge_slave_0 entered promiscuous mode
[ 2633.406601][ T2421] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2633.414617][ T2421] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2633.426306][ T2421] device bridge_slave_1 entered promiscuous mode
[ 2633.507793][ T2421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2633.531348][ T2421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2633.677708][ T2421] team0: Port device team_slave_0 added
[ 2633.688762][ T2421] team0: Port device team_slave_1 added
[ 2633.773641][ T2421] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2633.781305][ T2421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2633.814342][ T2421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2633.845134][ T2421] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2633.852751][ T2421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2633.894486][ T2421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2633.977706][ T2421] device hsr_slave_0 entered promiscuous mode
[ 2633.993581][ T2421] device hsr_slave_1 entered promiscuous mode
[ 2634.002282][ T2421] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2634.018970][ T2421] Cannot create hsr debugfs directory
[ 2634.211787][T30460] device hsr_slave_0 left promiscuous mode
[ 2634.223340][T30460] device hsr_slave_1 left promiscuous mode
[ 2634.231556][T30460] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2634.251223][T30460] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2634.277663][T30460] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2634.297814][T30460] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2634.321666][T30460] device bridge_slave_1 left promiscuous mode
[ 2634.329391][T30460] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2634.340814][T30460] device bridge_slave_0 left promiscuous mode
[ 2634.348274][T30460] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2634.391151][T30460] device veth1_macvtap left promiscuous mode
[ 2634.409954][T30460] device veth0_macvtap left promiscuous mode
[ 2634.422169][T30460] device veth1_vlan left promiscuous mode
[ 2634.441509][T30460] device veth0_vlan left promiscuous mode
[ 2634.728296][T30460] team0 (unregistering): Port device team_slave_1 removed
[ 2634.758061][T30460] team0 (unregistering): Port device team_slave_0 removed
[ 2634.775837][T30460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2634.793124][T30460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2634.914025][T30460] bond0 (unregistering): Released all slaves
[ 2635.054449][T16923] Bluetooth: hci4: command 0x0409 tx timeout
[ 2635.967791][ T2421] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2635.991426][ T2421] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2636.025212][ T2421] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2636.048580][ T2421] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2636.246389][ T2421] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2636.290069][T29723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2636.303652][T29723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2636.330841][ T2421] 8021q: adding VLAN 0 to HW filter on device team0
[ 2636.367828][T29723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2636.385034][T29723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2636.393710][T29723] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2636.400875][T29723] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2636.437643][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2636.457275][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2636.471907][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2636.497908][ T4448] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2636.505109][ T4448] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2636.541985][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2636.597573][T29723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2636.615382][T29723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2636.633936][T29723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2636.652635][T29723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2636.677311][T29723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2636.691429][T29723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2636.726575][T29723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2636.741043][T29723] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2636.756270][T19430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2636.775572][T19430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2636.807432][ T2421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2637.134760][T16923] Bluetooth: hci4: command 0x041b tx timeout
[ 2637.267680][T19430] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2637.284979][T19430] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2637.311153][ T2421] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2637.350194][ T2420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2637.366544][ T2420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2637.408862][ T2420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2637.420406][ T2420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2637.449468][ T2421] device veth0_vlan entered promiscuous mode
[ 2637.485213][T19430] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2637.504882][T19430] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2637.545281][ T2421] device veth1_vlan entered promiscuous mode
[ 2637.605425][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2637.624960][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2637.644926][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2637.665248][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2637.683336][ T2421] device veth0_macvtap entered promiscuous mode
[ 2637.714473][ T2421] device veth1_macvtap entered promiscuous mode
[ 2637.752409][ T2421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2637.775691][ T2421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2637.792899][ T2421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2637.813493][ T2421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2637.823722][ T2421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2637.841826][ T2421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2637.854017][ T2421] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2637.883516][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2637.900129][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2637.911351][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2637.931823][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2637.959572][ T2421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2637.980540][ T2421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2637.991393][ T2421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2638.002812][ T2421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2638.015847][ T2421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2638.028846][ T2421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2638.042654][ T2421] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2638.070124][T19423] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2638.081516][T19423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2638.097201][ T2421] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2638.109876][ T2421] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2638.120497][ T2421] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2638.131730][ T2421] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2638.300201][T30407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2638.322238][T30407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2638.349377][ T2420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2638.383113][T30460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2638.392114][T30460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2638.413954][T29723] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2638.513638][ T2503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2638.555116][T29723] wlan1: authenticate with 08:02:11:00:00:00
[ 2638.562313][T29723] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2638.582640][ T2503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2638.599603][T30407] wlan1: authenticated
[ 2638.605006][T19423] mac80211_hwsim hwsim97 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
[ 2638.626129][T30407] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[ 2638.669563][T30407] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[ 2638.669716][ T2503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2638.685513][T30407] wlan1: associated
03:24:54 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x60, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:24:54 executing program 4:
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000040)=""/23, 0xfffffffffffffcb4)

03:24:54 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x4000000}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x80}}, 0x0)
close(r0)

03:24:54 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0xc, 0x2, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0x1a}, @exit], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

03:24:54 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b={0x8, 0x6}, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:24:54 executing program 1:
socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0), 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getpgid(r0)
syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000002240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffd}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x200, 0x20000003}, 0x10}, 0x80)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000b00), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0xc4153, r3, 0x791c2000)

03:24:54 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0xc, 0x2, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0x1a}, @exit], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

03:24:54 executing program 4:
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000040)=""/23, 0xfffffffffffffcb4)

[ 2639.090100][ T2525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2640.325666][T16923] Bluetooth: hci4: command 0x040f tx timeout
03:24:56 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x4000000}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x80}}, 0x0)
close(r0)

[ 2640.563770][ T2528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2640.595741][ T2525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:24:56 executing program 4:
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000040)=""/23, 0xfffffffffffffcb4)

03:24:56 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0xc, 0x2, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0x1a}, @exit], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[ 2640.713910][ T2528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2640.725423][ T2525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:24:56 executing program 4:
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000040)=""/23, 0xfffffffffffffcb4)

[ 2640.814951][ T2528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:24:56 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x88, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:24:56 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0xc, 0x2, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0x1a}, @exit], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

03:24:56 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x4000000}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x80}}, 0x0)
close(r0)

03:24:56 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b={0x8, 0x7}, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:24:56 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x4000000}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x80}}, 0x0)
close(r0)

03:24:56 executing program 1:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000001c0)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000500)=""/73, &(0x7f00000002c0)=""/90})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000380)=ANY=[])
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'})

03:24:56 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x149101)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000440)=ANY=[@ANYRES32])
dup(0xffffffffffffffff)
dup(r0)
r1 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)

[ 2641.370544][ T2560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:24:57 executing program 1:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10)
setsockopt$inet_tcp_buf(r0, 0x6, 0xa, &(0x7f00000005c0)="a6431324", 0x4)

03:24:57 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x4000000}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x80}}, 0x0)
close(r0)

03:24:57 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x4000000}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x80}}, 0x0)
close(r0)

[ 2641.488121][ T2560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2641.499535][ T2564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:24:57 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0)
write(r1, &(0x7f0000000240)="01", 0x1)
close(r1)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0)
creat(&(0x7f00000000c0)='./file1\x00', 0x0)
symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00')

03:24:57 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x4000000}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x80}}, 0x0)
close(r0)

[ 2641.621817][ T2560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2641.641876][ T2564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2641.720070][ T2575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:24:57 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x300, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:24:57 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000000c0)=0x80, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6}]}, 0x10)
close(r0)

03:24:57 executing program 1:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10)
setsockopt$inet_tcp_buf(r0, 0x6, 0xa, &(0x7f00000005c0)="a6431324", 0x4)

03:24:57 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0)
write(r1, &(0x7f0000000240)="01", 0x1)
close(r1)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0)
creat(&(0x7f00000000c0)='./file1\x00', 0x0)
symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00')

03:24:57 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0)
write(r1, &(0x7f0000000240)="01", 0x1)
close(r1)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0)
creat(&(0x7f00000000c0)='./file1\x00', 0x0)
symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00')

03:24:57 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b={0x8, 0x9}, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:24:57 executing program 1:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10)
setsockopt$inet_tcp_buf(r0, 0x6, 0xa, &(0x7f00000005c0)="a6431324", 0x4)

03:24:57 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000000c0)=0x80, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6}]}, 0x10)
close(r0)

03:24:57 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0)
write(r1, &(0x7f0000000240)="01", 0x1)
close(r1)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0)
creat(&(0x7f00000000c0)='./file1\x00', 0x0)
symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00')

03:24:57 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0)
write(r1, &(0x7f0000000240)="01", 0x1)
close(r1)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0)
creat(&(0x7f00000000c0)='./file1\x00', 0x0)
symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00')

[ 2642.168185][ T2596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:24:57 executing program 1:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10)
setsockopt$inet_tcp_buf(r0, 0x6, 0xa, &(0x7f00000005c0)="a6431324", 0x4)

[ 2642.231966][ T2599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:24:57 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000000c0)=0x80, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6}]}, 0x10)
close(r0)

[ 2642.307728][ T2596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2642.336500][ T2599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2642.414681][T16923] Bluetooth: hci4: command 0x0419 tx timeout
[ 2642.417853][ T2599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2642.422272][ T2596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:24:58 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x3e7, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:24:58 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0)
write(r1, &(0x7f0000000240)="01", 0x1)
close(r1)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0)
creat(&(0x7f00000000c0)='./file1\x00', 0x0)
symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00')

03:24:58 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0)
write(r1, &(0x7f0000000240)="01", 0x1)
close(r1)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0)
creat(&(0x7f00000000c0)='./file1\x00', 0x0)
symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00')

03:24:58 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000000c0)=0x80, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6}]}, 0x10)
close(r0)

03:24:58 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0)
write(r1, &(0x7f0000000240)="01", 0x1)
close(r1)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0)
creat(&(0x7f00000000c0)='./file1\x00', 0x0)
symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00')

03:24:58 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b={0x8, 0xa}, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:24:58 executing program 2:
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000300)={[{@shortname_mixed}, {@utf8}, {@fat=@check_strict}, {@uni_xlate}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@utf8no}, {@shortname_winnt}, {@numtail}, {@shortname_win95}, {@uni_xlateno}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}]}, 0x1, 0x245, &(0x7f0000001240)="$eJzs3cFqE1sYB/BvmqQ3vV0ki7u6XLgDunBV2j5Bu6ggdqVkoRsttgVJQsFCoFWMXbn3QXwTN76BD1BwZxeFyGSStkKiTkiMtr/fJh+c85/5zuQkWc3k6X/t5u7B4f7Jq09RrSaxsBEbcZZEPRZi6E0AANfJWa8Xn3u5Ysnywqx6AgBma/LffwDgT/Xw0eP7m9vbWw/StBrRfttpJJG/5uOb+/E8WrEXq1GL84jehby+e297K8ppph63291OI0u2n3wYHH/zNKKfX4ta1Efn19LclXy306jE34Pzb2T59ajFP6Pz6yPy0ViMO7eu9L8Stfj4LA6iFbuRZS/zr9fSbNFfXvY7zvJJt9P4qz/vUq/0q98bAAAAAAAAAAAAAAAAAAAAAACur5X0Qv3b5++UzvvjK+PG8/y45wN1rzxfZzVN016Sz+80KpHny/FvOcrzXDsAAAAAAAAAAAAAAAAAAAD8Lg6Pjps7rdbei6kWw9v6Jz1O833ETBprRWnQWiuZ1SmKF0tZPxPE3xWYvJQX/8eE5ypUDHdXcyeJH0yuFtgkSYFN2xux/UpjU4tTWvvi8nQvZrbiysXF/P7kypQ/KeOUZvRVBAAAAAAAAAAAAAAAAAAAN97p8vA26RGDJ3NoCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADm4PDouJn//3+BojsI/2RqzksEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgBvgaAAD//68fbwA=")
mknod(&(0x7f0000000000)='./file1\x00', 0x0, 0x0)

03:24:58 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0xffffffff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x1})

03:24:58 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0)
write(r1, &(0x7f0000000240)="01", 0x1)
close(r1)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0)
creat(&(0x7f00000000c0)='./file1\x00', 0x0)
symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00')

03:24:58 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0140000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20ec5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0)

[ 2642.917358][ T2624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2642.953776][ T2627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:24:58 executing program 2:
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', 0x0})
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
mlock(&(0x7f000022b000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000320000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00005d3000/0x2000)=nil)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0)
madvise(&(0x7f00006be000/0x4000)=nil, 0x4000, 0x14)

03:24:58 executing program 4:
epoll_create1(0x0)
syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2)
mkdir(0x0, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
prlimit64(0x0, 0x0, &(0x7f0000000280)={0xffff}, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e)
syz_mount_image$udf(&(0x7f0000000480), &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="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"/715, @ANYRES32], 0x1, 0xbee, &(0x7f00000018c0)="$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")
setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff})
r2 = open(&(0x7f00000002c0)='./bus\x00', 0x1c1042, 0x0)
pwrite64(r2, &(0x7f0000000180)="13", 0x1, 0x4010040bffd)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

[ 2643.063293][ T2636] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 2643.072723][ T2627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2643.144030][ T2627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2643.386632][ T2644] 8021q: adding VLAN 0 to HW filter on device bond8
[ 2643.406328][ T2644] bond0: (slave bond8): Enslaving as an active interface with an up link
03:24:59 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x500, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:24:59 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0)
write(r1, &(0x7f0000000240)="01", 0x1)
close(r1)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0)
creat(&(0x7f00000000c0)='./file1\x00', 0x0)
symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00')

03:24:59 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@gettaction={0x38, 0x12, 0xc04f71083a749379, 0x0, 0x0, {0x4}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xa, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0x38}}, 0x0)

03:24:59 executing program 2:
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', 0x0})
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
mlock(&(0x7f000022b000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000320000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00005d3000/0x2000)=nil)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0)
madvise(&(0x7f00006be000/0x4000)=nil, 0x4000, 0x14)

[ 2643.464002][ T2636] device bridge12 entered promiscuous mode
[ 2643.489159][ T2636] device bridge12 left promiscuous mode
[ 2643.513866][ T2648] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
03:24:59 executing program 1:
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', 0x0})
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
mlock(&(0x7f000022b000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000320000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00005d3000/0x2000)=nil)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0)
madvise(&(0x7f00006be000/0x4000)=nil, 0x4000, 0x14)

[ 2643.578249][ T2648] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2643.592915][ T2636] bond8: (slave vlan0): making interface the new active one
[ 2643.644844][ T2636] device bridge12 entered promiscuous mode
[ 2643.664564][ T2636] bond8: (slave vlan0): Enslaving as an active interface with an up link
[ 2643.723848][ T2648] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[ 2643.759244][ T2657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2643.771243][ T2648] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2643.852580][ T2652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2643.951975][ T2652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2644.851267][T30460] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2644.939016][T30460] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2645.018499][T30460] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2645.096119][T30460] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2646.044067][T21395] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 2646.055434][T21395] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 2646.073526][T21395] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 2646.082612][T21395] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 2646.090711][T21395] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 2646.098124][T21395] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 2646.352155][T30460] device hsr_slave_0 left promiscuous mode
[ 2646.359313][T30460] device hsr_slave_1 left promiscuous mode
[ 2646.368216][T30460] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2646.376043][T30460] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2646.385538][T30460] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2646.392987][T30460] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2646.402790][T30460] device bridge_slave_1 left promiscuous mode
[ 2646.409157][T30460] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2646.425184][T30460] device bridge_slave_0 left promiscuous mode
[ 2646.431462][T30460] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2646.445949][T30460] device veth1_macvtap left promiscuous mode
[ 2646.452031][T30460] device veth0_macvtap left promiscuous mode
[ 2646.458456][T30460] device veth1_vlan left promiscuous mode
[ 2646.464391][T30460] device veth0_vlan left promiscuous mode
[ 2646.780313][T30460] team0 (unregistering): Port device team_slave_1 removed
[ 2646.800612][T30460] team0 (unregistering): Port device team_slave_0 removed
[ 2646.820566][T30460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2646.842361][T30460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2646.950986][T30460] bond0 (unregistering): Released all slaves
[ 2647.203997][ T2679] chnl_net:caif_netlink_parms(): no params data found
[ 2647.359245][ T2679] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2647.373213][ T2679] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2647.393762][ T2679] device bridge_slave_0 entered promiscuous mode
[ 2647.421296][ T2679] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2647.430301][ T2679] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2647.440012][ T2679] device bridge_slave_1 entered promiscuous mode
[ 2647.511533][ T2679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2647.538208][ T2679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2647.613776][ T2679] team0: Port device team_slave_0 added
[ 2647.625244][ T2679] team0: Port device team_slave_1 added
[ 2647.664330][ T2679] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2647.671969][ T2679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2647.754167][ T2679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2647.776454][ T2679] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2647.783538][ T2679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2647.864123][ T2679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2647.997771][ T2679] device hsr_slave_0 entered promiscuous mode
[ 2648.005248][ T2679] device hsr_slave_1 entered promiscuous mode
[ 2648.012964][ T2679] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2648.021481][ T2679] Cannot create hsr debugfs directory
[ 2648.174455][T16923] Bluetooth: hci5: command 0x0409 tx timeout
[ 2649.651504][ T2679] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2649.672625][ T2679] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2649.691053][ T2679] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2649.702189][ T2679] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2649.866370][ T2679] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2649.906995][T29723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2649.923089][T29723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2649.942489][ T2679] 8021q: adding VLAN 0 to HW filter on device team0
[ 2649.962580][T29723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2649.972465][T29723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2649.988869][T29723] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2649.996051][T29723] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2650.064767][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2650.073652][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2650.090796][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2650.103029][ T4448] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2650.110199][ T4448] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2650.126098][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2650.139804][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2650.151942][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2650.169829][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2650.203941][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2650.212613][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2650.229595][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2650.241899][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2650.255547][T16923] Bluetooth: hci5: command 0x041b tx timeout
[ 2650.265233][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2650.280242][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2650.290957][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2650.308659][ T2679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2650.644841][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2650.652404][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2650.682069][ T2679] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2651.131239][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2651.150357][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2651.202794][ T2679] device veth0_vlan entered promiscuous mode
[ 2651.210190][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2651.219970][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2651.235069][ T2679] device veth1_vlan entered promiscuous mode
[ 2651.251063][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2651.262124][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2651.277371][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2651.290761][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2651.328774][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2651.340696][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2651.356788][ T2679] device veth0_macvtap entered promiscuous mode
[ 2651.387956][ T2679] device veth1_macvtap entered promiscuous mode
[ 2651.424834][ T2679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2651.443041][ T2679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2651.452983][ T2679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2651.470887][ T2679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2651.483545][ T2679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2651.502224][ T2679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2651.521068][ T2679] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2651.529285][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2651.554692][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2651.562994][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2651.579943][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2651.594467][ T2679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2651.610407][ T2679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2651.627326][ T2679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2651.638123][ T2679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2651.649026][ T2679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2651.659805][ T2679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2651.671752][ T2679] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2651.683831][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2651.719133][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2651.751188][ T2679] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2651.764831][ T2679] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2651.773699][ T2679] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2651.783645][ T2679] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2651.932113][T30460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2651.949035][T30460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2651.970815][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2651.971160][T30309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2651.993480][T30309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2652.018124][T22270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2652.115968][ T2785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2652.191578][ T2785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2652.253352][ T2785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2652.339558][T16923] Bluetooth: hci5: command 0x040f tx timeout
03:25:08 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b={0x8, 0x10}, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:25:08 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0140000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20ec5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0)

03:25:08 executing program 2:
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', 0x0})
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
mlock(&(0x7f000022b000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000320000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00005d3000/0x2000)=nil)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0)
madvise(&(0x7f00006be000/0x4000)=nil, 0x4000, 0x14)

03:25:08 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@gettaction={0x38, 0x12, 0xc04f71083a749379, 0x0, 0x0, {0x4}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xa, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0x38}}, 0x0)

03:25:08 executing program 1:
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', 0x0})
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
mlock(&(0x7f000022b000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000320000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00005d3000/0x2000)=nil)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0)
madvise(&(0x7f00006be000/0x4000)=nil, 0x4000, 0x14)

03:25:08 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x600, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2652.639308][ T2806] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 2652.644869][ T2805] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[ 2652.692772][ T2805] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2652.775746][ T2816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2652.830026][ T2813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2652.846515][ T2809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2652.886701][ T2805] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
03:25:08 executing program 1:
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', 0x0})
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
mlock(&(0x7f000022b000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000320000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00005d3000/0x2000)=nil)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0)
madvise(&(0x7f00006be000/0x4000)=nil, 0x4000, 0x14)

03:25:08 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@gettaction={0x38, 0x12, 0xc04f71083a749379, 0x0, 0x0, {0x4}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xa, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0x38}}, 0x0)

[ 2652.933451][ T2805] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2652.944568][ T2814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2652.961433][ T2813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:25:08 executing program 2:
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', 0x0})
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
mlock(&(0x7f000022b000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000320000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00005d3000/0x2000)=nil)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0)
madvise(&(0x7f00006be000/0x4000)=nil, 0x4000, 0x14)

[ 2653.025880][ T2806] bond9: (slave vlan1): making interface the new active one
[ 2653.035121][ T2817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2653.070808][ T2806] bond9: (slave vlan1): Enslaving as an active interface with an up link
[ 2653.092650][ T2826] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[ 2653.118243][ T2826] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2653.148515][ T2826] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
03:25:08 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0140000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20ec5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0)

[ 2653.181272][ T2826] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:25:08 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@gettaction={0x38, 0x12, 0xc04f71083a749379, 0x0, 0x0, {0x4}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xa, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0x38}}, 0x0)

03:25:08 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x700, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:25:08 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b={0x8, 0x18}, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:25:08 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0140000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20ec5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0)

[ 2653.378893][ T2834] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 2653.441840][ T2837] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[ 2653.463530][ T2837] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
03:25:09 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0140000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20ec5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0)

[ 2653.530941][ T2847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2653.583885][ T2837] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[ 2653.612487][ T2837] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2653.625547][ T2854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2653.645423][ T2836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2653.671498][ T2845] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
03:25:09 executing program 4:
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', 0x0})
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
mlock(&(0x7f000022b000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000320000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00005d3000/0x2000)=nil)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0)
madvise(&(0x7f00006be000/0x4000)=nil, 0x4000, 0x14)

[ 2653.751489][ T2844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2653.762555][ T2836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2653.863213][ T2848] 8021q: adding VLAN 0 to HW filter on device bond10
[ 2653.871551][ T2844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2653.879962][ T2848] bond0: (slave bond10): Enslaving as an active interface with an up link
[ 2653.913548][ T2851] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[ 2654.059059][ T2834] device bridge14 entered promiscuous mode
[ 2654.066572][ T2834] device bridge14 left promiscuous mode
[ 2654.076982][ T2834] bond10: (slave vlan2): making interface the new active one
03:25:09 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x900, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2654.119705][ T2834] device bridge14 entered promiscuous mode
[ 2654.143004][ T2834] bond10: (slave vlan2): Enslaving as an active interface with an up link
03:25:09 executing program 4:
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', 0x0})
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
mlock(&(0x7f000022b000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000320000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00005d3000/0x2000)=nil)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0)
madvise(&(0x7f00006be000/0x4000)=nil, 0x4000, 0x14)

03:25:09 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b={0x8, 0x64}, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2654.222915][ T2856] 8021q: adding VLAN 0 to HW filter on device bond3
[ 2654.258743][ T2856] bond0: (slave bond3): Enslaving as an active interface with an up link
03:25:09 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0140000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20ec5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0)

[ 2654.283071][ T2858] 8021q: adding VLAN 0 to HW filter on device bond1
[ 2654.320631][ T2875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2654.328100][ T2858] bond0: (slave bond1): Enslaving as an active interface with an up link
[ 2654.407036][ T2860] device bridge5 entered promiscuous mode
[ 2654.421170][T16923] Bluetooth: hci5: command 0x0419 tx timeout
[ 2654.433229][ T2881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2654.470024][ T2860] device bridge5 left promiscuous mode
[ 2654.479707][ T2885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2654.530601][ T2860] bond1: (slave vlan0): making interface the new active one
[ 2654.542122][ T2875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2654.543095][ T2885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:25:10 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0140000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20ec5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0)

[ 2654.578351][ T2860] device bridge5 entered promiscuous mode
[ 2654.587837][ T2860] bond1: (slave vlan0): Enslaving as an active interface with an up link
[ 2654.608799][ T2861] device bridge9 entered promiscuous mode
[ 2654.631854][ T2861] device bridge9 left promiscuous mode
03:25:10 executing program 4:
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', 0x0})
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
mlock(&(0x7f000022b000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000320000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00005d3000/0x2000)=nil)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0)
madvise(&(0x7f00006be000/0x4000)=nil, 0x4000, 0x14)

[ 2654.656893][ T2861] bond3: (slave vlan0): making interface the new active one
[ 2654.667787][ T2885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2654.707069][ T2861] device bridge9 entered promiscuous mode
[ 2654.721333][ T2861] bond3: (slave vlan0): Enslaving as an active interface with an up link
03:25:10 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0140000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20ec5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0)

[ 2654.750013][ T2873] wlan1: authenticate with 08:02:11:00:00:00
[ 2654.778291][ T2873] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2654.898978][ T2887] 8021q: adding VLAN 0 to HW filter on device bond11
[ 2654.924995][T30407] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[ 2654.961927][ T2887] bond0: (slave bond11): Enslaving as an active interface with an up link
03:25:10 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000a80)={0x0, 0xa, &(0x7f0000000a40)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @dev}]}, 0x24}}, 0x0)

[ 2655.017290][ T2888] device bridge15 entered promiscuous mode
[ 2655.023623][ T2888] device bridge15 left promiscuous mode
[ 2655.034347][T30407] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
03:25:10 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x2}, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2655.088920][ T2888] bond11: (slave vlan3): making interface the new active one
[ 2655.121890][ T2888] device bridge15 entered promiscuous mode
03:25:10 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0xa00, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2655.151366][T30296] wlan1: authentication with 08:02:11:00:00:00 timed out
[ 2655.175856][ T2888] bond11: (slave vlan3): Enslaving as an active interface with an up link
03:25:10 executing program 0:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0xaf01, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4008af04, 0x0)

03:25:10 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wg0\x00', &(0x7f0000000000)=@ethtool_eeprom={0xc}})

[ 2655.366579][ T2898] 8021q: adding VLAN 0 to HW filter on device bond2
[ 2655.386491][ T2898] bond0: (slave bond2): Enslaving as an active interface with an up link
[ 2655.437585][ T2922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2655.460497][ T2924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2655.501011][ T2904] device bridge6 entered promiscuous mode
[ 2655.521046][ T2922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2655.550073][ T2904] device bridge6 left promiscuous mode
[ 2655.585947][ T2904] bond2: (slave vlan1): making interface the new active one
[ 2655.593877][ T2904] device bridge6 entered promiscuous mode
[ 2655.601627][ T2924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2655.625625][ T2928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2655.631302][ T2904] bond2: (slave vlan1): Enslaving as an active interface with an up link
[ 2655.672083][ T2905] 8021q: adding VLAN 0 to HW filter on device bond4
03:25:11 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0140000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20ec5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0)

[ 2655.693468][ T2905] bond0: (slave bond4): Enslaving as an active interface with an up link
[ 2655.697982][ T2924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2655.752189][ T2906] device bridge10 entered promiscuous mode
[ 2655.759394][ T2906] device bridge10 left promiscuous mode
[ 2655.771100][ T2906] bond4: (slave vlan1): making interface the new active one
03:25:11 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0140000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20ec5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0)

[ 2655.800112][ T2906] device bridge10 entered promiscuous mode
[ 2655.810719][ T2906] bond4: (slave vlan1): Enslaving as an active interface with an up link
03:25:11 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000a80)={0x0, 0xa, &(0x7f0000000a40)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @dev}]}, 0x24}}, 0x0)

03:25:11 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wg0\x00', &(0x7f0000000000)=@ethtool_eeprom={0xc}})

[ 2656.032271][ T2931] 8021q: adding VLAN 0 to HW filter on device bond3
[ 2656.077946][ T2931] bond0: (slave bond3): Enslaving as an active interface with an up link
03:25:11 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000a80)={0x0, 0xa, &(0x7f0000000a40)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @dev}]}, 0x24}}, 0x0)

03:25:11 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wg0\x00', &(0x7f0000000000)=@ethtool_eeprom={0xc}})

03:25:11 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x41}, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2656.191950][ T2930] device bridge7 entered promiscuous mode
[ 2656.221703][ T2930] device bridge7 left promiscuous mode
03:25:11 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0xb00, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2656.250794][ T2930] bond3: (slave vlan2): making interface the new active one
[ 2656.273189][ T2930] device bridge7 entered promiscuous mode
[ 2656.315695][ T2930] bond3: (slave vlan2): Enslaving as an active interface with an up link
[ 2656.366640][ T2943] 8021q: adding VLAN 0 to HW filter on device bond5
[ 2656.390584][ T2943] bond0: (slave bond5): Enslaving as an active interface with an up link
[ 2656.419164][ T2958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:25:12 executing program 2:
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="646973636172642c0008fd346f1fe0c7b977cf98b0dfc801ecf9a88e1ae482"], 0x1, 0x559d, &(0x7f0000005680)="$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")
lseek(0xffffffffffffffff, 0x0, 0x0)
open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0)
creat(0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r0=>0x0, <r1=>0x0})
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000006900)=ANY=[@ANYRES32=r1, @ANYRES8=0x0, @ANYRES32, @ANYRES16, @ANYRES16=r1, @ANYRES8=r1, @ANYBLOB="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"/346, @ANYRES64=r0], 0x2, 0x1de, &(0x7f0000002f00)="$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")
openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
write$nci(0xffffffffffffffff, 0x0, 0x0)

[ 2656.465727][ T2959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2656.499103][ T2933] device bridge11 entered promiscuous mode
[ 2656.509896][ T2964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2656.525501][ T2933] device bridge11 left promiscuous mode
[ 2656.561768][ T2933] bond5: (slave vlan2): making interface the new active one
[ 2656.581531][ T2959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2656.595180][ T2933] device bridge11 entered promiscuous mode
[ 2656.603878][ T2933] bond5: (slave vlan2): Enslaving as an active interface with an up link
[ 2656.615174][ T2964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:25:12 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wg0\x00', &(0x7f0000000000)=@ethtool_eeprom={0xc}})

03:25:12 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000a80)={0x0, 0xa, &(0x7f0000000a40)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @dev}]}, 0x24}}, 0x0)

[ 2656.656512][ T1253] ieee802154 phy0 wpan0: encryption failed: -22
[ 2656.663400][ T1253] ieee802154 phy1 wpan1: encryption failed: -22
[ 2656.675630][ T2953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:25:12 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_vlan\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1d, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0)

03:25:12 executing program 4:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000042c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00(`qH\x00', 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000009800)="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", 0x2000, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x20}})
r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000ec0)=ANY=[])

03:25:12 executing program 1:
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRES16=0x0], 0x1, 0x76a, &(0x7f0000000fc0)="$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")
r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50}, 0x50)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
read$FUSE(r1, &(0x7f0000001740)={0x2020}, 0x2020)
sendfile(r2, r1, 0x0, 0x1ffff)
fallocate(r0, 0x0, 0x0, 0x8000)

03:25:12 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_vlan\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1d, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0)

[ 2656.868690][ T2977] fuse: Bad value for 'fd'
03:25:12 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r4 = getpid()
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000500)="d6e73c14872227f3e9d6d3e358c722081c872b778a0e9f587b9ac027de0ea4f069a4f0c5d990c03a4a3adcc9105870c3f9b5702f4c72d553b4a3", 0x3a}], 0x1, &(0x7f0000006940)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="d66a45cd84f692320400ab0f010114c6e1f8413f8aba84f4cccd13396d9affe84269486cd0529eecaee4c61b9b41077a86f0ed1126ed5af83d15a422a023ea4bc9d7d4bbec46a0b535bb7a177f7304698243262c63aee2a05a84df78fe08daf681039335904c06a28a9954e1e45533944fcedf3b0671c510558113c262cdbb0b7a4ab18b73", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0000000018000000000601000000010000000002", @ANYRES32, @ANYRES32=r3], 0x90}}, {{&(0x7f0000000880)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20008884}}, {{&(0x7f00000009c0)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000a40)="9769346fdd460132ba9753b107cc53261d0be5ab988761af3ba15567f0e703ac216f2263e72a31b8132df63722bed8565315589b294062a15854ca25a095482ac746bc1f36757c7a8bfb6c3d3d75e5b22fa8c2d172a482cec6ea81c6872a0447b002a98c0d3472b35be1eec59ff16e9b28762ffc6b47e538b505ab8e12eb281f1e8e159c35afe4acafe610fd97b6f3df75cd8ee37324fc58d5a9d40df33b4ef590b8dd23d15b2bb196848f7ac40c22e20c434e23298d8ee9acd37ffc4625e4b3fc50b5b8abbae6a7bbf328516c2ff3117e0a40bb76aaa572c2", 0xd9}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="fceaacc2151228933e3996e5da37ea4aaed2b85f33d2b9b9a8203909f7258ea469db5dc392f0c75b24799aff8df0282f765a777fe79c33faa4cea2ee611a0ac640ed542455409d22471a95ab4ffef3afe9b784702b54056721651bbebe8553fee93d16ebea86d112", 0x68}], 0x3, 0x0, 0x0, 0x2000895}}], 0x4, 0x20000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd\x00')
r6 = syz_open_procfs(0x0, &(0x7f0000000040))
utimensat(r6, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)={{}, {0x77359400}}, 0x0)
sendfile(r5, r6, &(0x7f0000000000), 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
fchdir(r5)
recvmmsg(r6, &(0x7f0000006680)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/1, 0x1}, {&(0x7f00000001c0)=""/35, 0x23}, {&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/185, 0xb9}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/202, 0xca}], 0x7, &(0x7f0000000280)=""/31, 0x1f}, 0x1}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000380)=""/29, 0x1d}, {&(0x7f00000038c0)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/211, 0xd3}, {&(0x7f0000000700)=""/1, 0x1}, {&(0x7f0000000740)=""/47, 0x2f}], 0x5, &(0x7f0000000d80)=""/180, 0xb4}, 0x9}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000940)=""/57, 0x39}, {&(0x7f0000000c40)=""/7, 0x7}, {&(0x7f0000000c80)=""/61, 0x3d}, {&(0x7f0000000e40)=""/198, 0xc6}, {&(0x7f0000000f40)=""/109, 0x6d}, {&(0x7f0000000fc0)=""/30, 0x1e}], 0x6, &(0x7f0000001080)=""/189, 0xbd}, 0xfee5}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001140)=""/18, 0x12}, {&(0x7f0000001180)=""/206, 0xce}, {&(0x7f0000001280)=""/128, 0x80}], 0x3, &(0x7f00000048c0)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000001340)=@caif=@dgm, 0x80, &(0x7f00000015c0)=[{&(0x7f00000013c0)=""/154, 0x9a}, {&(0x7f0000001480)=""/12, 0xc}, {&(0x7f00000014c0)=""/216, 0xd8}], 0x3, &(0x7f0000001600)=""/176, 0xb0}}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000005cc0)=[{&(0x7f0000001740)=""/47, 0x2f}, {&(0x7f00000058c0)=""/148, 0x94}, {&(0x7f0000005980)=""/164, 0xa4}, {&(0x7f0000005a40)=""/232, 0xe8}, {&(0x7f0000005b40)=""/190, 0xbe}, {&(0x7f0000005c00)=""/153, 0x99}], 0x6}, 0xffffff80}, {{&(0x7f0000005d40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000005dc0)=""/75, 0x4b}, {&(0x7f0000005e40)=""/69, 0x45}, {&(0x7f0000005ec0)=""/84, 0x54}, {&(0x7f0000005f40)=""/190, 0xbe}], 0x4, &(0x7f0000006000)=""/155, 0x9b}, 0x27c}, {{0x0, 0x0, &(0x7f0000006500)=[{&(0x7f00000060c0)=""/19, 0x13}, {&(0x7f0000006100)=""/232, 0xe8}, {&(0x7f0000006200)=""/44, 0x2c}, {&(0x7f0000006240)=""/12, 0xc}, {&(0x7f0000006280)=""/44, 0x2c}, {&(0x7f00000062c0)=""/13, 0xd}, {&(0x7f0000006300)=""/148, 0x94}, {&(0x7f00000063c0)=""/224, 0xe0}, {&(0x7f00000064c0)=""/28, 0x1c}], 0x9, &(0x7f00000065c0)=""/170, 0xaa}, 0x80}], 0x8, 0x22, &(0x7f0000006880)={0x77359400})
ioctl$TIOCSPGRP(r5, 0x5410, &(0x7f00000000c0)=r4)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r7 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0)
r8 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0)
r9 = open(&(0x7f0000000000)='./bus\x00', 0x1810c2, 0x0)
write$P9_RREADDIR(r9, &(0x7f0000000100)=ANY=[], 0xbf)
write$P9_RLINK(r9, &(0x7f0000000100)={0x7}, 0x7)

03:25:12 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:25:12 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0xba7, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:25:12 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_vlan\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1d, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0)

[ 2657.016589][   T27] audit: type=1804 audit(1682565912.564:1274): pid=2982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir37862524/syzkaller.yw2Wx7/1089/bus" dev="sda1" ino=1951 res=1 errno=0
03:25:12 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000500000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10)
r1 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)

[ 2657.143186][   T27] audit: type=1804 audit(1682565912.584:1275): pid=2982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir37862524/syzkaller.yw2Wx7/1089/bus" dev="sda1" ino=1951 res=1 errno=0
[ 2658.051363][ T3002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2658.082829][ T2996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2658.208752][ T3002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2658.265218][ T2996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2658.365876][ T2995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2658.393530][ T2996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:25:14 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r4 = getpid()
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000500)="d6e73c14872227f3e9d6d3e358c722081c872b778a0e9f587b9ac027de0ea4f069a4f0c5d990c03a4a3adcc9105870c3f9b5702f4c72d553b4a3", 0x3a}], 0x1, &(0x7f0000006940)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="d66a45cd84f692320400ab0f010114c6e1f8413f8aba84f4cccd13396d9affe84269486cd0529eecaee4c61b9b41077a86f0ed1126ed5af83d15a422a023ea4bc9d7d4bbec46a0b535bb7a177f7304698243262c63aee2a05a84df78fe08daf681039335904c06a28a9954e1e45533944fcedf3b0671c510558113c262cdbb0b7a4ab18b73", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0000000018000000000601000000010000000002", @ANYRES32, @ANYRES32=r3], 0x90}}, {{&(0x7f0000000880)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20008884}}, {{&(0x7f00000009c0)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000a40)="9769346fdd460132ba9753b107cc53261d0be5ab988761af3ba15567f0e703ac216f2263e72a31b8132df63722bed8565315589b294062a15854ca25a095482ac746bc1f36757c7a8bfb6c3d3d75e5b22fa8c2d172a482cec6ea81c6872a0447b002a98c0d3472b35be1eec59ff16e9b28762ffc6b47e538b505ab8e12eb281f1e8e159c35afe4acafe610fd97b6f3df75cd8ee37324fc58d5a9d40df33b4ef590b8dd23d15b2bb196848f7ac40c22e20c434e23298d8ee9acd37ffc4625e4b3fc50b5b8abbae6a7bbf328516c2ff3117e0a40bb76aaa572c2", 0xd9}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="fceaacc2151228933e3996e5da37ea4aaed2b85f33d2b9b9a8203909f7258ea469db5dc392f0c75b24799aff8df0282f765a777fe79c33faa4cea2ee611a0ac640ed542455409d22471a95ab4ffef3afe9b784702b54056721651bbebe8553fee93d16ebea86d112", 0x68}], 0x3, 0x0, 0x0, 0x2000895}}], 0x4, 0x20000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd\x00')
r6 = syz_open_procfs(0x0, &(0x7f0000000040))
utimensat(r6, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)={{}, {0x77359400}}, 0x0)
sendfile(r5, r6, &(0x7f0000000000), 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
fchdir(r5)
recvmmsg(r6, &(0x7f0000006680)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/1, 0x1}, {&(0x7f00000001c0)=""/35, 0x23}, {&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/185, 0xb9}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/202, 0xca}], 0x7, &(0x7f0000000280)=""/31, 0x1f}, 0x1}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000380)=""/29, 0x1d}, {&(0x7f00000038c0)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/211, 0xd3}, {&(0x7f0000000700)=""/1, 0x1}, {&(0x7f0000000740)=""/47, 0x2f}], 0x5, &(0x7f0000000d80)=""/180, 0xb4}, 0x9}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000940)=""/57, 0x39}, {&(0x7f0000000c40)=""/7, 0x7}, {&(0x7f0000000c80)=""/61, 0x3d}, {&(0x7f0000000e40)=""/198, 0xc6}, {&(0x7f0000000f40)=""/109, 0x6d}, {&(0x7f0000000fc0)=""/30, 0x1e}], 0x6, &(0x7f0000001080)=""/189, 0xbd}, 0xfee5}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001140)=""/18, 0x12}, {&(0x7f0000001180)=""/206, 0xce}, {&(0x7f0000001280)=""/128, 0x80}], 0x3, &(0x7f00000048c0)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000001340)=@caif=@dgm, 0x80, &(0x7f00000015c0)=[{&(0x7f00000013c0)=""/154, 0x9a}, {&(0x7f0000001480)=""/12, 0xc}, {&(0x7f00000014c0)=""/216, 0xd8}], 0x3, &(0x7f0000001600)=""/176, 0xb0}}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000005cc0)=[{&(0x7f0000001740)=""/47, 0x2f}, {&(0x7f00000058c0)=""/148, 0x94}, {&(0x7f0000005980)=""/164, 0xa4}, {&(0x7f0000005a40)=""/232, 0xe8}, {&(0x7f0000005b40)=""/190, 0xbe}, {&(0x7f0000005c00)=""/153, 0x99}], 0x6}, 0xffffff80}, {{&(0x7f0000005d40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000005dc0)=""/75, 0x4b}, {&(0x7f0000005e40)=""/69, 0x45}, {&(0x7f0000005ec0)=""/84, 0x54}, {&(0x7f0000005f40)=""/190, 0xbe}], 0x4, &(0x7f0000006000)=""/155, 0x9b}, 0x27c}, {{0x0, 0x0, &(0x7f0000006500)=[{&(0x7f00000060c0)=""/19, 0x13}, {&(0x7f0000006100)=""/232, 0xe8}, {&(0x7f0000006200)=""/44, 0x2c}, {&(0x7f0000006240)=""/12, 0xc}, {&(0x7f0000006280)=""/44, 0x2c}, {&(0x7f00000062c0)=""/13, 0xd}, {&(0x7f0000006300)=""/148, 0x94}, {&(0x7f00000063c0)=""/224, 0xe0}, {&(0x7f00000064c0)=""/28, 0x1c}], 0x9, &(0x7f00000065c0)=""/170, 0xaa}, 0x80}], 0x8, 0x22, &(0x7f0000006880)={0x77359400})
ioctl$TIOCSPGRP(r5, 0x5410, &(0x7f00000000c0)=r4)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r7 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0)
r8 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0)
r9 = open(&(0x7f0000000000)='./bus\x00', 0x1810c2, 0x0)
write$P9_RREADDIR(r9, &(0x7f0000000100)=ANY=[], 0xbf)
write$P9_RLINK(r9, &(0x7f0000000100)={0x7}, 0x7)

03:25:14 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_vlan\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1d, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0)

03:25:14 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000500000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10)
r1 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)

03:25:14 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r4 = getpid()
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000500)="d6e73c14872227f3e9d6d3e358c722081c872b778a0e9f587b9ac027de0ea4f069a4f0c5d990c03a4a3adcc9105870c3f9b5702f4c72d553b4a3", 0x3a}], 0x1, &(0x7f0000006940)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="d66a45cd84f692320400ab0f010114c6e1f8413f8aba84f4cccd13396d9affe84269486cd0529eecaee4c61b9b41077a86f0ed1126ed5af83d15a422a023ea4bc9d7d4bbec46a0b535bb7a177f7304698243262c63aee2a05a84df78fe08daf681039335904c06a28a9954e1e45533944fcedf3b0671c510558113c262cdbb0b7a4ab18b73", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0000000018000000000601000000010000000002", @ANYRES32, @ANYRES32=r3], 0x90}}, {{&(0x7f0000000880)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20008884}}, {{&(0x7f00000009c0)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000a40)="9769346fdd460132ba9753b107cc53261d0be5ab988761af3ba15567f0e703ac216f2263e72a31b8132df63722bed8565315589b294062a15854ca25a095482ac746bc1f36757c7a8bfb6c3d3d75e5b22fa8c2d172a482cec6ea81c6872a0447b002a98c0d3472b35be1eec59ff16e9b28762ffc6b47e538b505ab8e12eb281f1e8e159c35afe4acafe610fd97b6f3df75cd8ee37324fc58d5a9d40df33b4ef590b8dd23d15b2bb196848f7ac40c22e20c434e23298d8ee9acd37ffc4625e4b3fc50b5b8abbae6a7bbf328516c2ff3117e0a40bb76aaa572c2", 0xd9}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="fceaacc2151228933e3996e5da37ea4aaed2b85f33d2b9b9a8203909f7258ea469db5dc392f0c75b24799aff8df0282f765a777fe79c33faa4cea2ee611a0ac640ed542455409d22471a95ab4ffef3afe9b784702b54056721651bbebe8553fee93d16ebea86d112", 0x68}], 0x3, 0x0, 0x0, 0x2000895}}], 0x4, 0x20000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd\x00')
r6 = syz_open_procfs(0x0, &(0x7f0000000040))
utimensat(r6, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)={{}, {0x77359400}}, 0x0)
sendfile(r5, r6, &(0x7f0000000000), 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
fchdir(r5)
recvmmsg(r6, &(0x7f0000006680)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/1, 0x1}, {&(0x7f00000001c0)=""/35, 0x23}, {&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/185, 0xb9}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/202, 0xca}], 0x7, &(0x7f0000000280)=""/31, 0x1f}, 0x1}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000380)=""/29, 0x1d}, {&(0x7f00000038c0)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/211, 0xd3}, {&(0x7f0000000700)=""/1, 0x1}, {&(0x7f0000000740)=""/47, 0x2f}], 0x5, &(0x7f0000000d80)=""/180, 0xb4}, 0x9}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000940)=""/57, 0x39}, {&(0x7f0000000c40)=""/7, 0x7}, {&(0x7f0000000c80)=""/61, 0x3d}, {&(0x7f0000000e40)=""/198, 0xc6}, {&(0x7f0000000f40)=""/109, 0x6d}, {&(0x7f0000000fc0)=""/30, 0x1e}], 0x6, &(0x7f0000001080)=""/189, 0xbd}, 0xfee5}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001140)=""/18, 0x12}, {&(0x7f0000001180)=""/206, 0xce}, {&(0x7f0000001280)=""/128, 0x80}], 0x3, &(0x7f00000048c0)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000001340)=@caif=@dgm, 0x80, &(0x7f00000015c0)=[{&(0x7f00000013c0)=""/154, 0x9a}, {&(0x7f0000001480)=""/12, 0xc}, {&(0x7f00000014c0)=""/216, 0xd8}], 0x3, &(0x7f0000001600)=""/176, 0xb0}}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000005cc0)=[{&(0x7f0000001740)=""/47, 0x2f}, {&(0x7f00000058c0)=""/148, 0x94}, {&(0x7f0000005980)=""/164, 0xa4}, {&(0x7f0000005a40)=""/232, 0xe8}, {&(0x7f0000005b40)=""/190, 0xbe}, {&(0x7f0000005c00)=""/153, 0x99}], 0x6}, 0xffffff80}, {{&(0x7f0000005d40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000005dc0)=""/75, 0x4b}, {&(0x7f0000005e40)=""/69, 0x45}, {&(0x7f0000005ec0)=""/84, 0x54}, {&(0x7f0000005f40)=""/190, 0xbe}], 0x4, &(0x7f0000006000)=""/155, 0x9b}, 0x27c}, {{0x0, 0x0, &(0x7f0000006500)=[{&(0x7f00000060c0)=""/19, 0x13}, {&(0x7f0000006100)=""/232, 0xe8}, {&(0x7f0000006200)=""/44, 0x2c}, {&(0x7f0000006240)=""/12, 0xc}, {&(0x7f0000006280)=""/44, 0x2c}, {&(0x7f00000062c0)=""/13, 0xd}, {&(0x7f0000006300)=""/148, 0x94}, {&(0x7f00000063c0)=""/224, 0xe0}, {&(0x7f00000064c0)=""/28, 0x1c}], 0x9, &(0x7f00000065c0)=""/170, 0xaa}, 0x80}], 0x8, 0x22, &(0x7f0000006880)={0x77359400})
ioctl$TIOCSPGRP(r5, 0x5410, &(0x7f00000000c0)=r4)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r7 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0)
r8 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0)
r9 = open(&(0x7f0000000000)='./bus\x00', 0x1810c2, 0x0)
write$P9_RREADDIR(r9, &(0x7f0000000100)=ANY=[], 0xbf)
write$P9_RLINK(r9, &(0x7f0000000100)={0x7}, 0x7)

03:25:14 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r4 = getpid()
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000500)="d6e73c14872227f3e9d6d3e358c722081c872b778a0e9f587b9ac027de0ea4f069a4f0c5d990c03a4a3adcc9105870c3f9b5702f4c72d553b4a3", 0x3a}], 0x1, &(0x7f0000006940)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="d66a45cd84f692320400ab0f010114c6e1f8413f8aba84f4cccd13396d9affe84269486cd0529eecaee4c61b9b41077a86f0ed1126ed5af83d15a422a023ea4bc9d7d4bbec46a0b535bb7a177f7304698243262c63aee2a05a84df78fe08daf681039335904c06a28a9954e1e45533944fcedf3b0671c510558113c262cdbb0b7a4ab18b73", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0000000018000000000601000000010000000002", @ANYRES32, @ANYRES32=r3], 0x90}}, {{&(0x7f0000000880)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20008884}}, {{&(0x7f00000009c0)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000a40)="9769346fdd460132ba9753b107cc53261d0be5ab988761af3ba15567f0e703ac216f2263e72a31b8132df63722bed8565315589b294062a15854ca25a095482ac746bc1f36757c7a8bfb6c3d3d75e5b22fa8c2d172a482cec6ea81c6872a0447b002a98c0d3472b35be1eec59ff16e9b28762ffc6b47e538b505ab8e12eb281f1e8e159c35afe4acafe610fd97b6f3df75cd8ee37324fc58d5a9d40df33b4ef590b8dd23d15b2bb196848f7ac40c22e20c434e23298d8ee9acd37ffc4625e4b3fc50b5b8abbae6a7bbf328516c2ff3117e0a40bb76aaa572c2", 0xd9}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="fceaacc2151228933e3996e5da37ea4aaed2b85f33d2b9b9a8203909f7258ea469db5dc392f0c75b24799aff8df0282f765a777fe79c33faa4cea2ee611a0ac640ed542455409d22471a95ab4ffef3afe9b784702b54056721651bbebe8553fee93d16ebea86d112", 0x68}], 0x3, 0x0, 0x0, 0x2000895}}], 0x4, 0x20000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd\x00')
r6 = syz_open_procfs(0x0, &(0x7f0000000040))
utimensat(r6, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)={{}, {0x77359400}}, 0x0)
sendfile(r5, r6, &(0x7f0000000000), 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
fchdir(r5)
recvmmsg(r6, &(0x7f0000006680)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/1, 0x1}, {&(0x7f00000001c0)=""/35, 0x23}, {&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/185, 0xb9}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/202, 0xca}], 0x7, &(0x7f0000000280)=""/31, 0x1f}, 0x1}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000380)=""/29, 0x1d}, {&(0x7f00000038c0)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/211, 0xd3}, {&(0x7f0000000700)=""/1, 0x1}, {&(0x7f0000000740)=""/47, 0x2f}], 0x5, &(0x7f0000000d80)=""/180, 0xb4}, 0x9}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000940)=""/57, 0x39}, {&(0x7f0000000c40)=""/7, 0x7}, {&(0x7f0000000c80)=""/61, 0x3d}, {&(0x7f0000000e40)=""/198, 0xc6}, {&(0x7f0000000f40)=""/109, 0x6d}, {&(0x7f0000000fc0)=""/30, 0x1e}], 0x6, &(0x7f0000001080)=""/189, 0xbd}, 0xfee5}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001140)=""/18, 0x12}, {&(0x7f0000001180)=""/206, 0xce}, {&(0x7f0000001280)=""/128, 0x80}], 0x3, &(0x7f00000048c0)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000001340)=@caif=@dgm, 0x80, &(0x7f00000015c0)=[{&(0x7f00000013c0)=""/154, 0x9a}, {&(0x7f0000001480)=""/12, 0xc}, {&(0x7f00000014c0)=""/216, 0xd8}], 0x3, &(0x7f0000001600)=""/176, 0xb0}}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000005cc0)=[{&(0x7f0000001740)=""/47, 0x2f}, {&(0x7f00000058c0)=""/148, 0x94}, {&(0x7f0000005980)=""/164, 0xa4}, {&(0x7f0000005a40)=""/232, 0xe8}, {&(0x7f0000005b40)=""/190, 0xbe}, {&(0x7f0000005c00)=""/153, 0x99}], 0x6}, 0xffffff80}, {{&(0x7f0000005d40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000005dc0)=""/75, 0x4b}, {&(0x7f0000005e40)=""/69, 0x45}, {&(0x7f0000005ec0)=""/84, 0x54}, {&(0x7f0000005f40)=""/190, 0xbe}], 0x4, &(0x7f0000006000)=""/155, 0x9b}, 0x27c}, {{0x0, 0x0, &(0x7f0000006500)=[{&(0x7f00000060c0)=""/19, 0x13}, {&(0x7f0000006100)=""/232, 0xe8}, {&(0x7f0000006200)=""/44, 0x2c}, {&(0x7f0000006240)=""/12, 0xc}, {&(0x7f0000006280)=""/44, 0x2c}, {&(0x7f00000062c0)=""/13, 0xd}, {&(0x7f0000006300)=""/148, 0x94}, {&(0x7f00000063c0)=""/224, 0xe0}, {&(0x7f00000064c0)=""/28, 0x1c}], 0x9, &(0x7f00000065c0)=""/170, 0xaa}, 0x80}], 0x8, 0x22, &(0x7f0000006880)={0x77359400})
ioctl$TIOCSPGRP(r5, 0x5410, &(0x7f00000000c0)=r4)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r7 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0)
r8 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0)
r9 = open(&(0x7f0000000000)='./bus\x00', 0x1810c2, 0x0)
write$P9_RREADDIR(r9, &(0x7f0000000100)=ANY=[], 0xbf)
write$P9_RLINK(r9, &(0x7f0000000100)={0x7}, 0x7)

03:25:16 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000500000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10)
r1 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)

03:25:16 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x2}, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:25:16 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0xc00, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:25:17 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r4 = getpid()
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000500)="d6e73c14872227f3e9d6d3e358c722081c872b778a0e9f587b9ac027de0ea4f069a4f0c5d990c03a4a3adcc9105870c3f9b5702f4c72d553b4a3", 0x3a}], 0x1, &(0x7f0000006940)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="d66a45cd84f692320400ab0f010114c6e1f8413f8aba84f4cccd13396d9affe84269486cd0529eecaee4c61b9b41077a86f0ed1126ed5af83d15a422a023ea4bc9d7d4bbec46a0b535bb7a177f7304698243262c63aee2a05a84df78fe08daf681039335904c06a28a9954e1e45533944fcedf3b0671c510558113c262cdbb0b7a4ab18b73", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0000000018000000000601000000010000000002", @ANYRES32, @ANYRES32=r3], 0x90}}, {{&(0x7f0000000880)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20008884}}, {{&(0x7f00000009c0)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000a40)="9769346fdd460132ba9753b107cc53261d0be5ab988761af3ba15567f0e703ac216f2263e72a31b8132df63722bed8565315589b294062a15854ca25a095482ac746bc1f36757c7a8bfb6c3d3d75e5b22fa8c2d172a482cec6ea81c6872a0447b002a98c0d3472b35be1eec59ff16e9b28762ffc6b47e538b505ab8e12eb281f1e8e159c35afe4acafe610fd97b6f3df75cd8ee37324fc58d5a9d40df33b4ef590b8dd23d15b2bb196848f7ac40c22e20c434e23298d8ee9acd37ffc4625e4b3fc50b5b8abbae6a7bbf328516c2ff3117e0a40bb76aaa572c2", 0xd9}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="fceaacc2151228933e3996e5da37ea4aaed2b85f33d2b9b9a8203909f7258ea469db5dc392f0c75b24799aff8df0282f765a777fe79c33faa4cea2ee611a0ac640ed542455409d22471a95ab4ffef3afe9b784702b54056721651bbebe8553fee93d16ebea86d112", 0x68}], 0x3, 0x0, 0x0, 0x2000895}}], 0x4, 0x20000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd\x00')
r6 = syz_open_procfs(0x0, &(0x7f0000000040))
utimensat(r6, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)={{}, {0x77359400}}, 0x0)
sendfile(r5, r6, &(0x7f0000000000), 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
fchdir(r5)
recvmmsg(r6, &(0x7f0000006680)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/1, 0x1}, {&(0x7f00000001c0)=""/35, 0x23}, {&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/185, 0xb9}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/202, 0xca}], 0x7, &(0x7f0000000280)=""/31, 0x1f}, 0x1}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000380)=""/29, 0x1d}, {&(0x7f00000038c0)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/211, 0xd3}, {&(0x7f0000000700)=""/1, 0x1}, {&(0x7f0000000740)=""/47, 0x2f}], 0x5, &(0x7f0000000d80)=""/180, 0xb4}, 0x9}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000940)=""/57, 0x39}, {&(0x7f0000000c40)=""/7, 0x7}, {&(0x7f0000000c80)=""/61, 0x3d}, {&(0x7f0000000e40)=""/198, 0xc6}, {&(0x7f0000000f40)=""/109, 0x6d}, {&(0x7f0000000fc0)=""/30, 0x1e}], 0x6, &(0x7f0000001080)=""/189, 0xbd}, 0xfee5}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001140)=""/18, 0x12}, {&(0x7f0000001180)=""/206, 0xce}, {&(0x7f0000001280)=""/128, 0x80}], 0x3, &(0x7f00000048c0)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000001340)=@caif=@dgm, 0x80, &(0x7f00000015c0)=[{&(0x7f00000013c0)=""/154, 0x9a}, {&(0x7f0000001480)=""/12, 0xc}, {&(0x7f00000014c0)=""/216, 0xd8}], 0x3, &(0x7f0000001600)=""/176, 0xb0}}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000005cc0)=[{&(0x7f0000001740)=""/47, 0x2f}, {&(0x7f00000058c0)=""/148, 0x94}, {&(0x7f0000005980)=""/164, 0xa4}, {&(0x7f0000005a40)=""/232, 0xe8}, {&(0x7f0000005b40)=""/190, 0xbe}, {&(0x7f0000005c00)=""/153, 0x99}], 0x6}, 0xffffff80}, {{&(0x7f0000005d40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000005dc0)=""/75, 0x4b}, {&(0x7f0000005e40)=""/69, 0x45}, {&(0x7f0000005ec0)=""/84, 0x54}, {&(0x7f0000005f40)=""/190, 0xbe}], 0x4, &(0x7f0000006000)=""/155, 0x9b}, 0x27c}, {{0x0, 0x0, &(0x7f0000006500)=[{&(0x7f00000060c0)=""/19, 0x13}, {&(0x7f0000006100)=""/232, 0xe8}, {&(0x7f0000006200)=""/44, 0x2c}, {&(0x7f0000006240)=""/12, 0xc}, {&(0x7f0000006280)=""/44, 0x2c}, {&(0x7f00000062c0)=""/13, 0xd}, {&(0x7f0000006300)=""/148, 0x94}, {&(0x7f00000063c0)=""/224, 0xe0}, {&(0x7f00000064c0)=""/28, 0x1c}], 0x9, &(0x7f00000065c0)=""/170, 0xaa}, 0x80}], 0x8, 0x22, &(0x7f0000006880)={0x77359400})
ioctl$TIOCSPGRP(r5, 0x5410, &(0x7f00000000c0)=r4)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r7 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0)
r8 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0)
r9 = open(&(0x7f0000000000)='./bus\x00', 0x1810c2, 0x0)
write$P9_RREADDIR(r9, &(0x7f0000000100)=ANY=[], 0xbf)
write$P9_RLINK(r9, &(0x7f0000000100)={0x7}, 0x7)

03:25:17 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r4 = getpid()
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000500)="d6e73c14872227f3e9d6d3e358c722081c872b778a0e9f587b9ac027de0ea4f069a4f0c5d990c03a4a3adcc9105870c3f9b5702f4c72d553b4a3", 0x3a}], 0x1, &(0x7f0000006940)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="d66a45cd84f692320400ab0f010114c6e1f8413f8aba84f4cccd13396d9affe84269486cd0529eecaee4c61b9b41077a86f0ed1126ed5af83d15a422a023ea4bc9d7d4bbec46a0b535bb7a177f7304698243262c63aee2a05a84df78fe08daf681039335904c06a28a9954e1e45533944fcedf3b0671c510558113c262cdbb0b7a4ab18b73", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0000000018000000000601000000010000000002", @ANYRES32, @ANYRES32=r3], 0x90}}, {{&(0x7f0000000880)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20008884}}, {{&(0x7f00000009c0)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000a40)="9769346fdd460132ba9753b107cc53261d0be5ab988761af3ba15567f0e703ac216f2263e72a31b8132df63722bed8565315589b294062a15854ca25a095482ac746bc1f36757c7a8bfb6c3d3d75e5b22fa8c2d172a482cec6ea81c6872a0447b002a98c0d3472b35be1eec59ff16e9b28762ffc6b47e538b505ab8e12eb281f1e8e159c35afe4acafe610fd97b6f3df75cd8ee37324fc58d5a9d40df33b4ef590b8dd23d15b2bb196848f7ac40c22e20c434e23298d8ee9acd37ffc4625e4b3fc50b5b8abbae6a7bbf328516c2ff3117e0a40bb76aaa572c2", 0xd9}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="fceaacc2151228933e3996e5da37ea4aaed2b85f33d2b9b9a8203909f7258ea469db5dc392f0c75b24799aff8df0282f765a777fe79c33faa4cea2ee611a0ac640ed542455409d22471a95ab4ffef3afe9b784702b54056721651bbebe8553fee93d16ebea86d112", 0x68}], 0x3, 0x0, 0x0, 0x2000895}}], 0x4, 0x20000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd\x00')
r6 = syz_open_procfs(0x0, &(0x7f0000000040))
utimensat(r6, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)={{}, {0x77359400}}, 0x0)
sendfile(r5, r6, &(0x7f0000000000), 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
fchdir(r5)
recvmmsg(r6, &(0x7f0000006680)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/1, 0x1}, {&(0x7f00000001c0)=""/35, 0x23}, {&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/185, 0xb9}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/202, 0xca}], 0x7, &(0x7f0000000280)=""/31, 0x1f}, 0x1}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000380)=""/29, 0x1d}, {&(0x7f00000038c0)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/211, 0xd3}, {&(0x7f0000000700)=""/1, 0x1}, {&(0x7f0000000740)=""/47, 0x2f}], 0x5, &(0x7f0000000d80)=""/180, 0xb4}, 0x9}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000940)=""/57, 0x39}, {&(0x7f0000000c40)=""/7, 0x7}, {&(0x7f0000000c80)=""/61, 0x3d}, {&(0x7f0000000e40)=""/198, 0xc6}, {&(0x7f0000000f40)=""/109, 0x6d}, {&(0x7f0000000fc0)=""/30, 0x1e}], 0x6, &(0x7f0000001080)=""/189, 0xbd}, 0xfee5}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001140)=""/18, 0x12}, {&(0x7f0000001180)=""/206, 0xce}, {&(0x7f0000001280)=""/128, 0x80}], 0x3, &(0x7f00000048c0)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000001340)=@caif=@dgm, 0x80, &(0x7f00000015c0)=[{&(0x7f00000013c0)=""/154, 0x9a}, {&(0x7f0000001480)=""/12, 0xc}, {&(0x7f00000014c0)=""/216, 0xd8}], 0x3, &(0x7f0000001600)=""/176, 0xb0}}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000005cc0)=[{&(0x7f0000001740)=""/47, 0x2f}, {&(0x7f00000058c0)=""/148, 0x94}, {&(0x7f0000005980)=""/164, 0xa4}, {&(0x7f0000005a40)=""/232, 0xe8}, {&(0x7f0000005b40)=""/190, 0xbe}, {&(0x7f0000005c00)=""/153, 0x99}], 0x6}, 0xffffff80}, {{&(0x7f0000005d40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000005dc0)=""/75, 0x4b}, {&(0x7f0000005e40)=""/69, 0x45}, {&(0x7f0000005ec0)=""/84, 0x54}, {&(0x7f0000005f40)=""/190, 0xbe}], 0x4, &(0x7f0000006000)=""/155, 0x9b}, 0x27c}, {{0x0, 0x0, &(0x7f0000006500)=[{&(0x7f00000060c0)=""/19, 0x13}, {&(0x7f0000006100)=""/232, 0xe8}, {&(0x7f0000006200)=""/44, 0x2c}, {&(0x7f0000006240)=""/12, 0xc}, {&(0x7f0000006280)=""/44, 0x2c}, {&(0x7f00000062c0)=""/13, 0xd}, {&(0x7f0000006300)=""/148, 0x94}, {&(0x7f00000063c0)=""/224, 0xe0}, {&(0x7f00000064c0)=""/28, 0x1c}], 0x9, &(0x7f00000065c0)=""/170, 0xaa}, 0x80}], 0x8, 0x22, &(0x7f0000006880)={0x77359400})
ioctl$TIOCSPGRP(r5, 0x5410, &(0x7f00000000c0)=r4)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r7 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0)
r8 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0)
r9 = open(&(0x7f0000000000)='./bus\x00', 0x1810c2, 0x0)
write$P9_RREADDIR(r9, &(0x7f0000000100)=ANY=[], 0xbf)
write$P9_RLINK(r9, &(0x7f0000000100)={0x7}, 0x7)

03:25:18 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r4 = getpid()
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000500)="d6e73c14872227f3e9d6d3e358c722081c872b778a0e9f587b9ac027de0ea4f069a4f0c5d990c03a4a3adcc9105870c3f9b5702f4c72d553b4a3", 0x3a}], 0x1, &(0x7f0000006940)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="d66a45cd84f692320400ab0f010114c6e1f8413f8aba84f4cccd13396d9affe84269486cd0529eecaee4c61b9b41077a86f0ed1126ed5af83d15a422a023ea4bc9d7d4bbec46a0b535bb7a177f7304698243262c63aee2a05a84df78fe08daf681039335904c06a28a9954e1e45533944fcedf3b0671c510558113c262cdbb0b7a4ab18b73", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0000000018000000000601000000010000000002", @ANYRES32, @ANYRES32=r3], 0x90}}, {{&(0x7f0000000880)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20008884}}, {{&(0x7f00000009c0)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000a40)="9769346fdd460132ba9753b107cc53261d0be5ab988761af3ba15567f0e703ac216f2263e72a31b8132df63722bed8565315589b294062a15854ca25a095482ac746bc1f36757c7a8bfb6c3d3d75e5b22fa8c2d172a482cec6ea81c6872a0447b002a98c0d3472b35be1eec59ff16e9b28762ffc6b47e538b505ab8e12eb281f1e8e159c35afe4acafe610fd97b6f3df75cd8ee37324fc58d5a9d40df33b4ef590b8dd23d15b2bb196848f7ac40c22e20c434e23298d8ee9acd37ffc4625e4b3fc50b5b8abbae6a7bbf328516c2ff3117e0a40bb76aaa572c2", 0xd9}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="fceaacc2151228933e3996e5da37ea4aaed2b85f33d2b9b9a8203909f7258ea469db5dc392f0c75b24799aff8df0282f765a777fe79c33faa4cea2ee611a0ac640ed542455409d22471a95ab4ffef3afe9b784702b54056721651bbebe8553fee93d16ebea86d112", 0x68}], 0x3, 0x0, 0x0, 0x2000895}}], 0x4, 0x20000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd\x00')
r6 = syz_open_procfs(0x0, &(0x7f0000000040))
utimensat(r6, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)={{}, {0x77359400}}, 0x0)
sendfile(r5, r6, &(0x7f0000000000), 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
fchdir(r5)
recvmmsg(r6, &(0x7f0000006680)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/1, 0x1}, {&(0x7f00000001c0)=""/35, 0x23}, {&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/185, 0xb9}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/202, 0xca}], 0x7, &(0x7f0000000280)=""/31, 0x1f}, 0x1}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000380)=""/29, 0x1d}, {&(0x7f00000038c0)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/211, 0xd3}, {&(0x7f0000000700)=""/1, 0x1}, {&(0x7f0000000740)=""/47, 0x2f}], 0x5, &(0x7f0000000d80)=""/180, 0xb4}, 0x9}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000940)=""/57, 0x39}, {&(0x7f0000000c40)=""/7, 0x7}, {&(0x7f0000000c80)=""/61, 0x3d}, {&(0x7f0000000e40)=""/198, 0xc6}, {&(0x7f0000000f40)=""/109, 0x6d}, {&(0x7f0000000fc0)=""/30, 0x1e}], 0x6, &(0x7f0000001080)=""/189, 0xbd}, 0xfee5}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001140)=""/18, 0x12}, {&(0x7f0000001180)=""/206, 0xce}, {&(0x7f0000001280)=""/128, 0x80}], 0x3, &(0x7f00000048c0)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000001340)=@caif=@dgm, 0x80, &(0x7f00000015c0)=[{&(0x7f00000013c0)=""/154, 0x9a}, {&(0x7f0000001480)=""/12, 0xc}, {&(0x7f00000014c0)=""/216, 0xd8}], 0x3, &(0x7f0000001600)=""/176, 0xb0}}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000005cc0)=[{&(0x7f0000001740)=""/47, 0x2f}, {&(0x7f00000058c0)=""/148, 0x94}, {&(0x7f0000005980)=""/164, 0xa4}, {&(0x7f0000005a40)=""/232, 0xe8}, {&(0x7f0000005b40)=""/190, 0xbe}, {&(0x7f0000005c00)=""/153, 0x99}], 0x6}, 0xffffff80}, {{&(0x7f0000005d40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000005dc0)=""/75, 0x4b}, {&(0x7f0000005e40)=""/69, 0x45}, {&(0x7f0000005ec0)=""/84, 0x54}, {&(0x7f0000005f40)=""/190, 0xbe}], 0x4, &(0x7f0000006000)=""/155, 0x9b}, 0x27c}, {{0x0, 0x0, &(0x7f0000006500)=[{&(0x7f00000060c0)=""/19, 0x13}, {&(0x7f0000006100)=""/232, 0xe8}, {&(0x7f0000006200)=""/44, 0x2c}, {&(0x7f0000006240)=""/12, 0xc}, {&(0x7f0000006280)=""/44, 0x2c}, {&(0x7f00000062c0)=""/13, 0xd}, {&(0x7f0000006300)=""/148, 0x94}, {&(0x7f00000063c0)=""/224, 0xe0}, {&(0x7f00000064c0)=""/28, 0x1c}], 0x9, &(0x7f00000065c0)=""/170, 0xaa}, 0x80}], 0x8, 0x22, &(0x7f0000006880)={0x77359400})
ioctl$TIOCSPGRP(r5, 0x5410, &(0x7f00000000c0)=r4)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r7 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0)
r8 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0)
r9 = open(&(0x7f0000000000)='./bus\x00', 0x1810c2, 0x0)
write$P9_RREADDIR(r9, &(0x7f0000000100)=ANY=[], 0xbf)
write$P9_RLINK(r9, &(0x7f0000000100)={0x7}, 0x7)

03:25:18 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000500000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10)
r1 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)

[ 2662.728024][ T3034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2662.767022][ T3037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:25:22 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x3}, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:25:22 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0xd00, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:25:22 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r4 = getpid()
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000500)="d6e73c14872227f3e9d6d3e358c722081c872b778a0e9f587b9ac027de0ea4f069a4f0c5d990c03a4a3adcc9105870c3f9b5702f4c72d553b4a3", 0x3a}], 0x1, &(0x7f0000006940)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="d66a45cd84f692320400ab0f010114c6e1f8413f8aba84f4cccd13396d9affe84269486cd0529eecaee4c61b9b41077a86f0ed1126ed5af83d15a422a023ea4bc9d7d4bbec46a0b535bb7a177f7304698243262c63aee2a05a84df78fe08daf681039335904c06a28a9954e1e45533944fcedf3b0671c510558113c262cdbb0b7a4ab18b73", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0000000018000000000601000000010000000002", @ANYRES32, @ANYRES32=r3], 0x90}}, {{&(0x7f0000000880)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20008884}}, {{&(0x7f00000009c0)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000a40)="9769346fdd460132ba9753b107cc53261d0be5ab988761af3ba15567f0e703ac216f2263e72a31b8132df63722bed8565315589b294062a15854ca25a095482ac746bc1f36757c7a8bfb6c3d3d75e5b22fa8c2d172a482cec6ea81c6872a0447b002a98c0d3472b35be1eec59ff16e9b28762ffc6b47e538b505ab8e12eb281f1e8e159c35afe4acafe610fd97b6f3df75cd8ee37324fc58d5a9d40df33b4ef590b8dd23d15b2bb196848f7ac40c22e20c434e23298d8ee9acd37ffc4625e4b3fc50b5b8abbae6a7bbf328516c2ff3117e0a40bb76aaa572c2", 0xd9}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="fceaacc2151228933e3996e5da37ea4aaed2b85f33d2b9b9a8203909f7258ea469db5dc392f0c75b24799aff8df0282f765a777fe79c33faa4cea2ee611a0ac640ed542455409d22471a95ab4ffef3afe9b784702b54056721651bbebe8553fee93d16ebea86d112", 0x68}], 0x3, 0x0, 0x0, 0x2000895}}], 0x4, 0x20000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd\x00')
r6 = syz_open_procfs(0x0, &(0x7f0000000040))
utimensat(r6, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)={{}, {0x77359400}}, 0x0)
sendfile(r5, r6, &(0x7f0000000000), 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
fchdir(r5)
recvmmsg(r6, &(0x7f0000006680)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/1, 0x1}, {&(0x7f00000001c0)=""/35, 0x23}, {&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/185, 0xb9}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/202, 0xca}], 0x7, &(0x7f0000000280)=""/31, 0x1f}, 0x1}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000380)=""/29, 0x1d}, {&(0x7f00000038c0)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/211, 0xd3}, {&(0x7f0000000700)=""/1, 0x1}, {&(0x7f0000000740)=""/47, 0x2f}], 0x5, &(0x7f0000000d80)=""/180, 0xb4}, 0x9}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000940)=""/57, 0x39}, {&(0x7f0000000c40)=""/7, 0x7}, {&(0x7f0000000c80)=""/61, 0x3d}, {&(0x7f0000000e40)=""/198, 0xc6}, {&(0x7f0000000f40)=""/109, 0x6d}, {&(0x7f0000000fc0)=""/30, 0x1e}], 0x6, &(0x7f0000001080)=""/189, 0xbd}, 0xfee5}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001140)=""/18, 0x12}, {&(0x7f0000001180)=""/206, 0xce}, {&(0x7f0000001280)=""/128, 0x80}], 0x3, &(0x7f00000048c0)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000001340)=@caif=@dgm, 0x80, &(0x7f00000015c0)=[{&(0x7f00000013c0)=""/154, 0x9a}, {&(0x7f0000001480)=""/12, 0xc}, {&(0x7f00000014c0)=""/216, 0xd8}], 0x3, &(0x7f0000001600)=""/176, 0xb0}}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000005cc0)=[{&(0x7f0000001740)=""/47, 0x2f}, {&(0x7f00000058c0)=""/148, 0x94}, {&(0x7f0000005980)=""/164, 0xa4}, {&(0x7f0000005a40)=""/232, 0xe8}, {&(0x7f0000005b40)=""/190, 0xbe}, {&(0x7f0000005c00)=""/153, 0x99}], 0x6}, 0xffffff80}, {{&(0x7f0000005d40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000005dc0)=""/75, 0x4b}, {&(0x7f0000005e40)=""/69, 0x45}, {&(0x7f0000005ec0)=""/84, 0x54}, {&(0x7f0000005f40)=""/190, 0xbe}], 0x4, &(0x7f0000006000)=""/155, 0x9b}, 0x27c}, {{0x0, 0x0, &(0x7f0000006500)=[{&(0x7f00000060c0)=""/19, 0x13}, {&(0x7f0000006100)=""/232, 0xe8}, {&(0x7f0000006200)=""/44, 0x2c}, {&(0x7f0000006240)=""/12, 0xc}, {&(0x7f0000006280)=""/44, 0x2c}, {&(0x7f00000062c0)=""/13, 0xd}, {&(0x7f0000006300)=""/148, 0x94}, {&(0x7f00000063c0)=""/224, 0xe0}, {&(0x7f00000064c0)=""/28, 0x1c}], 0x9, &(0x7f00000065c0)=""/170, 0xaa}, 0x80}], 0x8, 0x22, &(0x7f0000006880)={0x77359400})
ioctl$TIOCSPGRP(r5, 0x5410, &(0x7f00000000c0)=r4)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r7 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0)
r8 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0)
r9 = open(&(0x7f0000000000)='./bus\x00', 0x1810c2, 0x0)
write$P9_RREADDIR(r9, &(0x7f0000000100)=ANY=[], 0xbf)
write$P9_RLINK(r9, &(0x7f0000000100)={0x7}, 0x7)

03:25:22 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r4 = getpid()
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000500)="d6e73c14872227f3e9d6d3e358c722081c872b778a0e9f587b9ac027de0ea4f069a4f0c5d990c03a4a3adcc9105870c3f9b5702f4c72d553b4a3", 0x3a}], 0x1, &(0x7f0000006940)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="d66a45cd84f692320400ab0f010114c6e1f8413f8aba84f4cccd13396d9affe84269486cd0529eecaee4c61b9b41077a86f0ed1126ed5af83d15a422a023ea4bc9d7d4bbec46a0b535bb7a177f7304698243262c63aee2a05a84df78fe08daf681039335904c06a28a9954e1e45533944fcedf3b0671c510558113c262cdbb0b7a4ab18b73", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0000000018000000000601000000010000000002", @ANYRES32, @ANYRES32=r3], 0x90}}, {{&(0x7f0000000880)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20008884}}, {{&(0x7f00000009c0)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000a40)="9769346fdd460132ba9753b107cc53261d0be5ab988761af3ba15567f0e703ac216f2263e72a31b8132df63722bed8565315589b294062a15854ca25a095482ac746bc1f36757c7a8bfb6c3d3d75e5b22fa8c2d172a482cec6ea81c6872a0447b002a98c0d3472b35be1eec59ff16e9b28762ffc6b47e538b505ab8e12eb281f1e8e159c35afe4acafe610fd97b6f3df75cd8ee37324fc58d5a9d40df33b4ef590b8dd23d15b2bb196848f7ac40c22e20c434e23298d8ee9acd37ffc4625e4b3fc50b5b8abbae6a7bbf328516c2ff3117e0a40bb76aaa572c2", 0xd9}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="fceaacc2151228933e3996e5da37ea4aaed2b85f33d2b9b9a8203909f7258ea469db5dc392f0c75b24799aff8df0282f765a777fe79c33faa4cea2ee611a0ac640ed542455409d22471a95ab4ffef3afe9b784702b54056721651bbebe8553fee93d16ebea86d112", 0x68}], 0x3, 0x0, 0x0, 0x2000895}}], 0x4, 0x20000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd\x00')
r6 = syz_open_procfs(0x0, &(0x7f0000000040))
utimensat(r6, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)={{}, {0x77359400}}, 0x0)
sendfile(r5, r6, &(0x7f0000000000), 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
fchdir(r5)
recvmmsg(r6, &(0x7f0000006680)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/1, 0x1}, {&(0x7f00000001c0)=""/35, 0x23}, {&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/185, 0xb9}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/202, 0xca}], 0x7, &(0x7f0000000280)=""/31, 0x1f}, 0x1}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000380)=""/29, 0x1d}, {&(0x7f00000038c0)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/211, 0xd3}, {&(0x7f0000000700)=""/1, 0x1}, {&(0x7f0000000740)=""/47, 0x2f}], 0x5, &(0x7f0000000d80)=""/180, 0xb4}, 0x9}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000940)=""/57, 0x39}, {&(0x7f0000000c40)=""/7, 0x7}, {&(0x7f0000000c80)=""/61, 0x3d}, {&(0x7f0000000e40)=""/198, 0xc6}, {&(0x7f0000000f40)=""/109, 0x6d}, {&(0x7f0000000fc0)=""/30, 0x1e}], 0x6, &(0x7f0000001080)=""/189, 0xbd}, 0xfee5}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001140)=""/18, 0x12}, {&(0x7f0000001180)=""/206, 0xce}, {&(0x7f0000001280)=""/128, 0x80}], 0x3, &(0x7f00000048c0)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000001340)=@caif=@dgm, 0x80, &(0x7f00000015c0)=[{&(0x7f00000013c0)=""/154, 0x9a}, {&(0x7f0000001480)=""/12, 0xc}, {&(0x7f00000014c0)=""/216, 0xd8}], 0x3, &(0x7f0000001600)=""/176, 0xb0}}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000005cc0)=[{&(0x7f0000001740)=""/47, 0x2f}, {&(0x7f00000058c0)=""/148, 0x94}, {&(0x7f0000005980)=""/164, 0xa4}, {&(0x7f0000005a40)=""/232, 0xe8}, {&(0x7f0000005b40)=""/190, 0xbe}, {&(0x7f0000005c00)=""/153, 0x99}], 0x6}, 0xffffff80}, {{&(0x7f0000005d40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000005dc0)=""/75, 0x4b}, {&(0x7f0000005e40)=""/69, 0x45}, {&(0x7f0000005ec0)=""/84, 0x54}, {&(0x7f0000005f40)=""/190, 0xbe}], 0x4, &(0x7f0000006000)=""/155, 0x9b}, 0x27c}, {{0x0, 0x0, &(0x7f0000006500)=[{&(0x7f00000060c0)=""/19, 0x13}, {&(0x7f0000006100)=""/232, 0xe8}, {&(0x7f0000006200)=""/44, 0x2c}, {&(0x7f0000006240)=""/12, 0xc}, {&(0x7f0000006280)=""/44, 0x2c}, {&(0x7f00000062c0)=""/13, 0xd}, {&(0x7f0000006300)=""/148, 0x94}, {&(0x7f00000063c0)=""/224, 0xe0}, {&(0x7f00000064c0)=""/28, 0x1c}], 0x9, &(0x7f00000065c0)=""/170, 0xaa}, 0x80}], 0x8, 0x22, &(0x7f0000006880)={0x77359400})
ioctl$TIOCSPGRP(r5, 0x5410, &(0x7f00000000c0)=r4)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r7 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0)
r8 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0)
r9 = open(&(0x7f0000000000)='./bus\x00', 0x1810c2, 0x0)
write$P9_RREADDIR(r9, &(0x7f0000000100)=ANY=[], 0xbf)
write$P9_RLINK(r9, &(0x7f0000000100)={0x7}, 0x7)

03:25:22 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r4 = getpid()
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000500)="d6e73c14872227f3e9d6d3e358c722081c872b778a0e9f587b9ac027de0ea4f069a4f0c5d990c03a4a3adcc9105870c3f9b5702f4c72d553b4a3", 0x3a}], 0x1, &(0x7f0000006940)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="d66a45cd84f692320400ab0f010114c6e1f8413f8aba84f4cccd13396d9affe84269486cd0529eecaee4c61b9b41077a86f0ed1126ed5af83d15a422a023ea4bc9d7d4bbec46a0b535bb7a177f7304698243262c63aee2a05a84df78fe08daf681039335904c06a28a9954e1e45533944fcedf3b0671c510558113c262cdbb0b7a4ab18b73", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0000000018000000000601000000010000000002", @ANYRES32, @ANYRES32=r3], 0x90}}, {{&(0x7f0000000880)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20008884}}, {{&(0x7f00000009c0)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000a40)="9769346fdd460132ba9753b107cc53261d0be5ab988761af3ba15567f0e703ac216f2263e72a31b8132df63722bed8565315589b294062a15854ca25a095482ac746bc1f36757c7a8bfb6c3d3d75e5b22fa8c2d172a482cec6ea81c6872a0447b002a98c0d3472b35be1eec59ff16e9b28762ffc6b47e538b505ab8e12eb281f1e8e159c35afe4acafe610fd97b6f3df75cd8ee37324fc58d5a9d40df33b4ef590b8dd23d15b2bb196848f7ac40c22e20c434e23298d8ee9acd37ffc4625e4b3fc50b5b8abbae6a7bbf328516c2ff3117e0a40bb76aaa572c2", 0xd9}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="fceaacc2151228933e3996e5da37ea4aaed2b85f33d2b9b9a8203909f7258ea469db5dc392f0c75b24799aff8df0282f765a777fe79c33faa4cea2ee611a0ac640ed542455409d22471a95ab4ffef3afe9b784702b54056721651bbebe8553fee93d16ebea86d112", 0x68}], 0x3, 0x0, 0x0, 0x2000895}}], 0x4, 0x20000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd\x00')
r6 = syz_open_procfs(0x0, &(0x7f0000000040))
utimensat(r6, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)={{}, {0x77359400}}, 0x0)
sendfile(r5, r6, &(0x7f0000000000), 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
fchdir(r5)
recvmmsg(r6, &(0x7f0000006680)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/1, 0x1}, {&(0x7f00000001c0)=""/35, 0x23}, {&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/185, 0xb9}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/202, 0xca}], 0x7, &(0x7f0000000280)=""/31, 0x1f}, 0x1}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000380)=""/29, 0x1d}, {&(0x7f00000038c0)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/211, 0xd3}, {&(0x7f0000000700)=""/1, 0x1}, {&(0x7f0000000740)=""/47, 0x2f}], 0x5, &(0x7f0000000d80)=""/180, 0xb4}, 0x9}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000940)=""/57, 0x39}, {&(0x7f0000000c40)=""/7, 0x7}, {&(0x7f0000000c80)=""/61, 0x3d}, {&(0x7f0000000e40)=""/198, 0xc6}, {&(0x7f0000000f40)=""/109, 0x6d}, {&(0x7f0000000fc0)=""/30, 0x1e}], 0x6, &(0x7f0000001080)=""/189, 0xbd}, 0xfee5}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001140)=""/18, 0x12}, {&(0x7f0000001180)=""/206, 0xce}, {&(0x7f0000001280)=""/128, 0x80}], 0x3, &(0x7f00000048c0)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000001340)=@caif=@dgm, 0x80, &(0x7f00000015c0)=[{&(0x7f00000013c0)=""/154, 0x9a}, {&(0x7f0000001480)=""/12, 0xc}, {&(0x7f00000014c0)=""/216, 0xd8}], 0x3, &(0x7f0000001600)=""/176, 0xb0}}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000005cc0)=[{&(0x7f0000001740)=""/47, 0x2f}, {&(0x7f00000058c0)=""/148, 0x94}, {&(0x7f0000005980)=""/164, 0xa4}, {&(0x7f0000005a40)=""/232, 0xe8}, {&(0x7f0000005b40)=""/190, 0xbe}, {&(0x7f0000005c00)=""/153, 0x99}], 0x6}, 0xffffff80}, {{&(0x7f0000005d40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000005dc0)=""/75, 0x4b}, {&(0x7f0000005e40)=""/69, 0x45}, {&(0x7f0000005ec0)=""/84, 0x54}, {&(0x7f0000005f40)=""/190, 0xbe}], 0x4, &(0x7f0000006000)=""/155, 0x9b}, 0x27c}, {{0x0, 0x0, &(0x7f0000006500)=[{&(0x7f00000060c0)=""/19, 0x13}, {&(0x7f0000006100)=""/232, 0xe8}, {&(0x7f0000006200)=""/44, 0x2c}, {&(0x7f0000006240)=""/12, 0xc}, {&(0x7f0000006280)=""/44, 0x2c}, {&(0x7f00000062c0)=""/13, 0xd}, {&(0x7f0000006300)=""/148, 0x94}, {&(0x7f00000063c0)=""/224, 0xe0}, {&(0x7f00000064c0)=""/28, 0x1c}], 0x9, &(0x7f00000065c0)=""/170, 0xaa}, 0x80}], 0x8, 0x22, &(0x7f0000006880)={0x77359400})
ioctl$TIOCSPGRP(r5, 0x5410, &(0x7f00000000c0)=r4)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r7 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0)
r8 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0)
r9 = open(&(0x7f0000000000)='./bus\x00', 0x1810c2, 0x0)
write$P9_RREADDIR(r9, &(0x7f0000000100)=ANY=[], 0xbf)
write$P9_RLINK(r9, &(0x7f0000000100)={0x7}, 0x7)

03:25:22 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000500000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10)
r1 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)

[ 2667.252278][ T3056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2667.317105][ T3059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2669.589255][ T3056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2669.602824][ T3073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:25:26 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000500000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10)
r1 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)

03:25:26 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x4}, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2670.898798][ T3073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:25:26 executing program 4:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0x10}}, 0x0)

03:25:26 executing program 0:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$isdn_base(0x22, 0x3, 0x0)
bind(r0, &(0x7f00000001c0)=@ethernet={0x0, @broadcast}, 0x80)

03:25:26 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0008}]})
creat(&(0x7f0000000180)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
fdatasync(r0)

03:25:26 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000500000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10)
r1 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)

03:25:26 executing program 4:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0x10}}, 0x0)

03:25:26 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0xe00, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2671.241345][ T3086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2671.307368][ T3092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:25:26 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0008}]})
creat(&(0x7f0000000180)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
fdatasync(r0)

[ 2671.338134][   T27] audit: type=1804 audit(1682565926.884:1276): pid=3091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir978762703/syzkaller.1CEUcb/565/file0" dev="sda1" ino=1984 res=1 errno=0
03:25:26 executing program 4:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0x10}}, 0x0)

03:25:26 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@dev, @random="cb3b26efd40d", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "c304e1", 0x8, 0x0, 0x0, @remote, @empty, {[@fragment={0x3a}]}}}}}, 0x0)

03:25:27 executing program 0:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$isdn_base(0x22, 0x3, 0x0)
bind(r0, &(0x7f00000001c0)=@ethernet={0x0, @broadcast}, 0x80)

[ 2671.483292][ T3092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2671.492270][ T3100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:25:27 executing program 4:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0x10}}, 0x0)

[ 2671.586675][   T27] audit: type=1804 audit(1682565927.134:1277): pid=3107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir978762703/syzkaller.1CEUcb/566/file0" dev="sda1" ino=1980 res=1 errno=0
[ 2671.618625][ T3100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2671.727440][ T3100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2672.215577][T30294] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2672.301933][T30294] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2672.415139][T30294] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2672.537271][T30294] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2673.673391][T30294] device hsr_slave_0 left promiscuous mode
[ 2673.680328][T30294] device hsr_slave_1 left promiscuous mode
[ 2673.695913][T30294] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2673.703403][T30294] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2673.721231][T30294] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2673.731437][T30294] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2673.748473][T30294] device bridge_slave_1 left promiscuous mode
[ 2673.759494][T30294] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2673.771467][T30294] device bridge_slave_0 left promiscuous mode
[ 2673.782902][T30294] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2673.808991][T30294] device veth1_macvtap left promiscuous mode
[ 2673.820136][T30294] device veth0_macvtap left promiscuous mode
[ 2673.829879][T30294] device veth1_vlan left promiscuous mode
[ 2673.840472][T30294] device veth0_vlan left promiscuous mode
[ 2674.329756][T30294] team0 (unregistering): Port device team_slave_1 removed
[ 2674.365291][T30294] team0 (unregistering): Port device team_slave_0 removed
[ 2674.387915][T30294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2674.413311][T30294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2674.533790][T21395] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 2674.546411][T21395] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 2674.555118][T21395] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 2674.563908][T21395] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 2674.574198][T21395] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 2674.634667][T30294] bond0 (unregistering): Released all slaves
[ 2675.047672][ T3151] chnl_net:caif_netlink_parms(): no params data found
[ 2675.225217][ T3151] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2675.232466][ T3151] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2675.277099][ T3151] device bridge_slave_0 entered promiscuous mode
[ 2675.334138][ T3151] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2675.354455][ T3151] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2675.374438][ T3151] device bridge_slave_1 entered promiscuous mode
[ 2675.461052][ T3151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2675.488859][ T3151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2675.591045][ T3151] team0: Port device team_slave_0 added
[ 2675.618609][ T3151] team0: Port device team_slave_1 added
[ 2675.746963][ T3151] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2675.754007][ T3151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2675.788183][ T3151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2675.811067][ T3151] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2675.820601][ T3151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2675.861712][ T3151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2675.942971][ T3151] device hsr_slave_0 entered promiscuous mode
[ 2675.968487][ T3151] device hsr_slave_1 entered promiscuous mode
[ 2675.985936][ T3151] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2675.993549][ T3151] Cannot create hsr debugfs directory
[ 2676.654417][T16923] Bluetooth: hci5: command 0x0409 tx timeout
[ 2677.298237][ T3151] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2677.327932][ T3151] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2677.347979][ T3151] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2677.373157][ T3151] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2677.546750][ T3151] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2677.572219][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2677.584998][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2677.609557][ T3151] 8021q: adding VLAN 0 to HW filter on device team0
[ 2677.629117][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2677.645544][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2677.660231][T29724] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2677.667394][T29724] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2677.696633][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2677.717918][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2677.730997][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2677.748136][T29724] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2677.755312][T29724] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2677.770686][T29724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2677.813165][T21991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2677.823020][T21991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2677.842078][T21991] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2677.852703][T21991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2677.870055][T21991] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2677.892805][ T3151] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 2677.934246][ T3151] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2677.953318][T20005] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2677.962931][T20005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2677.972026][T20005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2677.981256][T20005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2677.990342][T20005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2678.012260][T20005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2678.304569][T22270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2678.313057][T22270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2678.341238][ T3151] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2678.734394][T16923] Bluetooth: hci5: command 0x041b tx timeout
[ 2678.857876][T20005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2678.872635][T20005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2678.919206][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2678.932472][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2678.950592][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2678.961762][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2678.980403][ T3151] device veth0_vlan entered promiscuous mode
[ 2679.011310][ T3151] device veth1_vlan entered promiscuous mode
[ 2679.068317][T19430] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2679.078334][T19430] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2679.088539][T19430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2679.100801][T19430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2679.125650][ T3151] device veth0_macvtap entered promiscuous mode
[ 2679.153549][ T3151] device veth1_macvtap entered promiscuous mode
[ 2679.195565][ T3151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2679.207578][ T3151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2679.219782][ T3151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2679.231575][ T3151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2679.243011][ T3151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2679.254894][ T3151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2679.277171][ T3151] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2679.295579][T20005] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2679.303999][T20005] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2679.321078][T20005] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2679.331419][T20005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2679.350997][ T3151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2679.370003][ T3151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2679.393247][ T3151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2679.405086][ T3151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2679.416942][ T3151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2679.428705][ T3151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2679.442273][ T3151] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2679.451963][T22270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2679.464594][T22270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2679.480572][ T3151] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2679.491203][ T3151] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2679.503410][ T3151] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2679.523440][ T3151] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2679.635539][T30442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2679.643816][T30442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2679.688938][T20005] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2679.710510][T30460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2679.724286][T30460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2679.741426][T20005] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2679.843197][ T3251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2679.919208][ T3251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2679.984612][ T3258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:25:35 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x5}, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

03:25:35 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@dev, @random="cb3b26efd40d", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "c304e1", 0x8, 0x0, 0x0, @remote, @empty, {[@fragment={0x3a}]}}}}}, 0x0)

03:25:35 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0008}]})
creat(&(0x7f0000000180)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
fdatasync(r0)

03:25:35 executing program 4:
clock_adjtime(0x0, &(0x7f0000000100)={0x337, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000})

03:25:35 executing program 0:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$isdn_base(0x22, 0x3, 0x0)
bind(r0, &(0x7f00000001c0)=@ethernet={0x0, @broadcast}, 0x80)

03:25:35 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0xf00, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

[ 2785.414026][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 2785.421101][    C1] rcu: 	0-...!: (1 GPs behind) idle=8aac/1/0x4000000000000000 softirq=117382/117383 fqs=0
[ 2785.432973][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P3273/1:b..l
[ 2785.440922][    C1] 	(detected by 1, t=10505 jiffies, g=177253, q=70 ncpus=2)
[ 2785.448227][    C1] Sending NMI from CPU 1 to CPUs 0:
[ 2785.453456][    C0] NMI backtrace for cpu 0
[ 2785.453467][    C0] CPU: 0 PID: 3269 Comm: syz-executor.1 Not tainted 6.1.26-syzkaller #0
[ 2785.453485][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023
[ 2785.453495][    C0] RIP: 0010:__lock_acquire+0x796/0x1f80
[ 2785.453518][    C0] Code: 00 81 e3 ff 1f 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 80 11 27 90 be 08 00 00 00 e8 c4 1d 76 00 48 0f a3 1d 4c 6c bd 0e 73 1b <48> 8d 04 5b 48 c1 e0 06 48 8d 98 80 70 f6 8f 48 ba 00 00 00 00 00
[ 2785.453533][    C0] RSP: 0018:ffffc90000007a00 EFLAGS: 00000057
[ 2785.453548][    C0] RAX: 0000000000000001 RBX: 0000000000000062 RCX: ffffffff8169a52c
[ 2785.453560][    C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90271188
[ 2785.453571][    C0] RBP: ffff88802147a800 R08: dffffc0000000000 R09: fffffbfff204e232
[ 2785.453585][    C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000002
[ 2785.453596][    C0] R13: ffff88802147a800 R14: 0000000000000002 R15: 1ffff1100428f502
[ 2785.453609][    C0] FS:  00005555563bc400(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 2785.453625][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2785.453637][    C0] CR2: 00007f7d6b50e801 CR3: 000000007ddc4000 CR4: 00000000003506f0
[ 2785.453653][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 2785.453663][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 2785.453674][    C0] Call Trace:
[ 2785.453681][    C0]  <IRQ>
[ 2785.453699][    C0]  lock_acquire+0x1f8/0x5a0
[ 2785.453715][    C0]  ? debug_object_deactivate+0x61/0x3f0
[ 2785.453742][    C0]  ? read_lock_is_recursive+0x10/0x10
[ 2785.453763][    C0]  ? do_raw_spin_unlock+0x137/0x8a0
[ 2785.453816][    C0]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 2785.453880][    C0]  _raw_spin_lock_irqsave+0xd1/0x120
[ 2785.453906][    C0]  ? debug_object_deactivate+0x61/0x3f0
[ 2785.453927][    C0]  ? _raw_spin_lock+0x40/0x40
[ 2785.453959][    C0]  debug_object_deactivate+0x61/0x3f0
[ 2785.453984][    C0]  debug_deactivate+0x1d/0x280
[ 2785.454010][    C0]  __hrtimer_run_queues+0x334/0xe50
[ 2785.454045][    C0]  ? hrtimer_interrupt+0x980/0x980
[ 2785.454069][    C0]  ? ktime_get_update_offsets_now+0x407/0x420
[ 2785.454091][    C0]  hrtimer_interrupt+0x392/0x980
[ 2785.454127][    C0]  __sysvec_apic_timer_interrupt+0x156/0x580
[ 2785.454153][    C0]  sysvec_apic_timer_interrupt+0x8c/0xb0
[ 2785.454180][    C0]  </IRQ>
[ 2785.454184][    C0]  <TASK>
[ 2785.454190][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2785.454229][    C0] RIP: 0010:__find_get_block+0x2b9/0x1120
[ 2785.454273][    C0] Code: 8b ff 49 83 fc f1 74 11 e8 94 21 8b ff 49 83 c7 08 49 ff cc e9 f8 fe ff ff e8 83 21 8b ff 45 31 ed e8 bb d2 91 ff fb 4d 85 ed <74> 6b e8 70 21 8b ff 4c 89 ef e8 28 d5 ff ff 48 c7 44 24 40 0e 36
[ 2785.454287][    C0] RSP: 0018:ffffc90004f5f640 EFLAGS: 00000246
[ 2785.454302][    C0] RAX: a758ea71cf50bc00 RBX: 0000000000021ec2 RCX: ffffffff816a047a
[ 2785.454315][    C0] RDX: dffffc0000000000 RSI: ffffffff8aebc620 RDI: ffffffff8b3cb520
[ 2785.454328][    C0] RBP: ffffc90004f5f770 R08: dffffc0000000000 R09: fffffbfff204e245
[ 2785.454341][    C0] R10: 0000000000000000 R11: dffffc0000000001 R12: fffffffffffffff1
[ 2785.454353][    C0] R13: 0000000000000000 R14: 000000000000164c R15: 0000000000035db0
[ 2785.454371][    C0]  ? mark_lock+0x9a/0x340
[ 2785.454397][    C0]  ? write_boundary_block+0xb0/0xb0
[ 2785.454413][    C0]  ? ext4_map_blocks+0x8e8/0x1ce0
[ 2785.454465][    C0]  __getblk_gfp+0x2d/0xa20
[ 2785.454484][    C0]  ? mark_lock+0x9a/0x340
[ 2785.454500][    C0]  ? reacquire_held_locks+0x660/0x660
[ 2785.454521][    C0]  ext4_getblk+0x2a7/0x7c0
[ 2785.454546][    C0]  ? ext4_get_block_unwritten+0x30/0x30
[ 2785.454572][    C0]  ? __might_sleep+0xb0/0xb0
[ 2785.454596][    C0]  ext4_bread_batch+0x5f/0x4d0
[ 2785.454622][    C0]  __ext4_find_entry+0xfd1/0x1b20
[ 2785.454668][    C0]  ? ext4_fname_setup_ci_filename+0x67/0x480
[ 2785.454691][    C0]  ? ext4_ci_compare+0x660/0x660
[ 2785.454715][    C0]  ? ext4_fname_prepare_lookup+0x2ea/0x400
[ 2785.454766][    C0]  ext4_lookup+0x176/0x740
[ 2785.454793][    C0]  ? __lock_acquire+0x1f80/0x1f80
[ 2785.454809][    C0]  ? ext4_add_entry+0x1010/0x1010
[ 2785.454838][    C0]  ? _raw_spin_unlock+0x24/0x40
[ 2785.454864][    C0]  ? d_alloc+0x194/0x1d0
[ 2785.454885][    C0]  __lookup_hash+0x117/0x240
[ 2785.454908][    C0]  filename_create+0x28d/0x530
[ 2785.454931][    C0]  ? kern_path_create+0x180/0x180
[ 2785.454952][    C0]  ? __lock_acquire+0x1f80/0x1f80
[ 2785.454969][    C0]  ? __virt_addr_valid+0x22b/0x2e0
[ 2785.454995][    C0]  do_symlinkat+0xf6/0x600
[ 2785.455020][    C0]  ? vfs_symlink+0x3d0/0x3d0
[ 2785.455041][    C0]  ? getname_flags+0x1ec/0x4e0
[ 2785.455062][    C0]  __x64_sys_symlinkat+0x95/0xa0
[ 2785.455084][    C0]  do_syscall_64+0x3d/0xb0
[ 2785.455106][    C0]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2785.455124][    C0] RIP: 0033:0x7f7d6b48baa7
[ 2785.455144][    C0] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2785.455158][    C0] RSP: 002b:00007ffeb0c6d1b8 EFLAGS: 00000206 ORIG_RAX: 000000000000010a
[ 2785.455175][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7d6b48baa7
[ 2785.455187][    C0] RDX: 00007f7d6b4e7d4d RSI: 00000000ffffff9c RDI: 00007ffeb0c6d280
[ 2785.455198][    C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 00007ffeb0c6d050
[ 2785.455209][    C0] R10: 00007ffeb0c6cf07 R11: 0000000000000206 R12: 0000000000000001
[ 2785.455220][    C0] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffeb0c6d280
[ 2785.455240][    C0]  </TASK>
[ 2785.455454][    C1] task:syz-executor.3  state:R  running task     stack:24968 pid:3273  ppid:2421   flags:0x00004000
[ 2785.996660][    C1] Call Trace:
[ 2785.999977][    C1]  <TASK>
[ 2786.002937][    C1]  __schedule+0x132c/0x4330
[ 2786.007492][    C1]  ? kasan_set_track+0x4b/0x70
[ 2786.012297][    C1]  ? kasan_save_free_info+0x27/0x40
[ 2786.017533][    C1]  ? __sched_text_start+0x8/0x8
[ 2786.022413][    C1]  ? print_irqtrace_events+0x210/0x210
[ 2786.027916][    C1]  ? preempt_schedule_irq+0xec/0x1c0
[ 2786.033243][    C1]  preempt_schedule_irq+0xf7/0x1c0
[ 2786.038414][    C1]  ? preempt_schedule_notrace+0x140/0x140
[ 2786.044198][    C1]  ? rcu_is_watching+0x11/0xb0
[ 2786.049020][    C1]  irqentry_exit+0x53/0x80
[ 2786.053528][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2786.059537][    C1] RIP: 0010:__sanitizer_cov_trace_switch+0x64/0xe0
[ 2786.066076][    C1] Code: c5 f0 cc ef 8a 4c 8b 4c 24 20 65 4c 8b 1d e4 d9 78 7e 31 d2 eb 08 48 ff c2 49 39 d2 74 71 4c 8b 74 d6 10 65 8b 05 d4 d9 78 7e <a9> 00 01 ff 00 74 11 a9 00 01 00 00 74 de 41 83 bb 8c 15 00 00 00
[ 2786.086053][    C1] RSP: 0018:ffffc90005a2f4f8 EFLAGS: 00000202
[ 2786.092146][    C1] RAX: 0000000080000000 RBX: ffff888074dd6a0c RCX: 000000000000008b
[ 2786.100142][    C1] RDX: 0000000000000001 RSI: ffffffff8e3bdb90 RDI: 0000000000000001
[ 2786.108136][    C1] RBP: ffffc90005a2f710 R08: 0000000000000005 R09: ffffffff8a74f00f
[ 2786.116136][    C1] R10: 0000000000000003 R11: ffff888029a8ba80 R12: ffff88801ea59898
[ 2786.124128][    C1] R13: ffffc90005a2f688 R14: 0000000000000002 R15: 0000000000000001
[ 2786.132143][    C1]  ? mt_validate+0x17ff/0x5ba0
[ 2786.136978][    C1]  mt_validate+0x17ff/0x5ba0
[ 2786.141617][    C1]  ? mt_dump_node+0x1700/0x1700
[ 2786.146495][    C1]  ? mas_store_prealloc+0x460/0x460
[ 2786.151726][    C1]  ? mas_destroy+0x1c8c/0x2310
[ 2786.156528][    C1]  ? mas_wr_walk+0x6c1/0x710
[ 2786.161155][    C1]  validate_mm_mt+0x165/0x670
[ 2786.166011][    C1]  ? mas_store_prealloc+0x460/0x460
[ 2786.171237][    C1]  ? mas_wr_store_entry+0x96f/0xc60
[ 2786.176465][    C1]  ? __split_vma+0x530/0x530
[ 2786.181095][    C1]  ? trace_ma_write+0xb9/0x270
[ 2786.185901][    C1]  validate_mm+0x16e/0x380
[ 2786.190353][    C1]  ? vma_expand+0x850/0x850
[ 2786.194905][    C1]  ? vma_mas_store+0xd6/0x310
[ 2786.199614][    C1]  __vma_adjust+0x1d30/0x1f30
[ 2786.204348][    C1]  ? validate_mm+0x380/0x380
[ 2786.208972][    C1]  ? slab_post_alloc_hook+0x2aa/0x370
[ 2786.214384][    C1]  ? anon_vma_clone+0x484/0x4d0
[ 2786.219263][    C1]  ? vm_area_dup+0x124/0x1b0
[ 2786.223923][    C1]  __split_vma+0x36e/0x530
[ 2786.228385][    C1]  mprotect_fixup+0x6a2/0x840
[ 2786.233112][    C1]  ? change_protection+0x3d40/0x3d40
[ 2786.238434][    C1]  ? apparmor_file_mprotect+0xf3/0x110
[ 2786.243927][    C1]  ? bpf_lsm_file_mprotect+0x5/0x10
[ 2786.249194][    C1]  ? security_file_mprotect+0x81/0xc0
[ 2786.254605][    C1]  do_mprotect_pkey+0x8b6/0xbe0
[ 2786.259487][    C1]  ? prot_none_test+0x10/0x10
[ 2786.264238][    C1]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2786.270254][    C1]  ? lockdep_hardirqs_on+0x94/0x130
[ 2786.275488][    C1]  __x64_sys_mprotect+0x7c/0x90
[ 2786.280376][    C1]  do_syscall_64+0x3d/0xb0
[ 2786.284825][    C1]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2786.290745][    C1] RIP: 0033:0x7fd63808c277
[ 2786.295184][    C1] RSP: 002b:00007fff578677b8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
[ 2786.303660][    C1] RAX: ffffffffffffffda RBX: 0000000000021000 RCX: 00007fd63808c277
[ 2786.311651][    C1] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fd638d22000
[ 2786.319644][    C1] RBP: 00007fff57867890 R08: 00000000ffffffff R09: 00007fd638d41700
[ 2786.327639][    C1] R10: 0000000000020022 R11: 0000000000000206 R12: 00007fff578679b0
[ 2786.335633][    C1] R13: 00007fd638d41700 R14: 0000000000000000 R15: 0000000000022000
[ 2786.343670][    C1]  </TASK>
[ 2786.346716][    C1] rcu: rcu_preempt kthread starved for 10505 jiffies! g177253 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[ 2786.358019][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 2786.368010][    C1] rcu: RCU grace-period kthread stack dump:
[ 2786.373910][    C1] task:rcu_preempt     state:R  running task     stack:26712 pid:16    ppid:2      flags:0x00004000
[ 2786.384716][    C1] Call Trace:
[ 2786.388016][    C1]  <TASK>
[ 2786.391026][    C1]  __schedule+0x132c/0x4330
[ 2786.395576][    C1]  ? __mod_timer+0x956/0xee0
[ 2786.400213][    C1]  ? __sched_text_start+0x8/0x8
[ 2786.405097][    C1]  ? lockdep_softirqs_off+0x420/0x420
[ 2786.410508][    C1]  ? print_irqtrace_events+0x210/0x210
[ 2786.416005][    C1]  ? do_raw_spin_unlock+0x137/0x8a0
[ 2786.421238][    C1]  schedule+0xbf/0x180
[ 2786.425338][    C1]  schedule_timeout+0x1b9/0x300
[ 2786.430229][    C1]  ? console_conditional_schedule+0x40/0x40
[ 2786.436161][    C1]  ? update_process_times+0x1b0/0x1b0
[ 2786.441579][    C1]  ? prepare_to_swait_event+0x321/0x340
[ 2786.447170][    C1]  rcu_gp_fqs_loop+0x2c2/0x1010
[ 2786.452108][    C1]  ? print_irqtrace_events+0x210/0x210
[ 2786.457612][    C1]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2786.463882][    C1]  ? lockdep_hardirqs_on+0x94/0x130
[ 2786.469115][    C1]  ? rcu_gp_init+0x15d0/0x15d0
[ 2786.473937][    C1]  rcu_gp_kthread+0xa3/0x3a0
[ 2786.478562][    C1]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[ 2786.483700][    C1]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 2786.489632][    C1]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 2786.495658][    C1]  ? __kthread_parkme+0x15c/0x1c0
[ 2786.500753][    C1]  kthread+0x268/0x300
[ 2786.504848][    C1]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[ 2786.510074][    C1]  ? kthread_blkcg+0xd0/0xd0
[ 2786.514693][    C1]  ret_from_fork+0x1f/0x30
[ 2786.519173][    C1]  </TASK>
[ 2786.522219][    C1] rcu: Stack dump where RCU GP kthread last ran:
[ 2786.528556][    C1] CPU: 1 PID: 30407 Comm: kworker/u4:60 Not tainted 6.1.26-syzkaller #0
[ 2786.536905][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023
[ 2786.546983][    C1] Workqueue: events_unbound toggle_allocation_gate
[ 2786.553518][    C1] RIP: 0010:smp_call_function_many_cond+0x1f67/0x33d0
[ 2786.560313][    C1] Code: e6 01 31 ff e8 9a 0c 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 0a e8 25 09 0b 00 e9 1b ff ff ff f3 90 42 0f b6 04 2b <84> c0 75 14 41 f7 07 01 00 00 00 0f 84 fe fe ff ff e8 03 09 0b 00
[ 2786.580035][    C1] RSP: 0000:ffffc9000b6175a0 EFLAGS: 00000293
[ 2786.586133][    C1] RAX: 0000000000000000 RBX: 1ffff11017308415 RCX: ffff888017f01d40
[ 2786.594129][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 2786.602118][    C1] RBP: ffffc9000b617980 R08: ffffffff817e8776 R09: fffffbfff204e231
[ 2786.610111][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000800000000
[ 2786.618102][    C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880b98420a8
[ 2786.626105][    C1] FS:  0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 2786.635061][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2786.641663][    C1] CR2: 00007f624e384c18 CR3: 000000000cc8e000 CR4: 00000000003506e0
[ 2786.649665][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 2786.657656][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 2786.665649][    C1] Call Trace:
[ 2786.668951][    C1]  <TASK>
[ 2786.671926][    C1]  ? text_poke_sync+0x20/0x20
[ 2786.676715][    C1]  ? smp_call_function_many+0x30/0x30
[ 2786.682116][    C1]  ? __lock_acquire+0x1f80/0x1f80
[ 2786.687160][    C1]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 2786.693195][    C1]  ? do_raw_spin_unlock+0x137/0x8a0
[ 2786.698422][    C1]  ? kmem_cache_alloc_bulk+0xcf/0x3f0
[ 2786.703830][    C1]  ? _raw_spin_unlock+0x24/0x40
[ 2786.708711][    C1]  ? __text_poke+0x887/0xa00
[ 2786.713355][    C1]  ? kmem_cache_alloc_bulk+0xcf/0x3f0
[ 2786.718772][    C1]  ? __text_poke+0xa00/0xa00
[ 2786.723402][    C1]  ? text_poke+0x90/0x90
[ 2786.727771][    C1]  ? __mutex_trylock_common+0x17e/0x2e0
[ 2786.733370][    C1]  ? __might_sleep+0xb0/0xb0
[ 2786.738169][    C1]  ? trace_raw_output_contention_end+0xd0/0xd0
[ 2786.744363][    C1]  ? rcu_is_watching+0x11/0xb0
[ 2786.749153][    C1]  ? trace_contention_end+0x61/0x170
[ 2786.754474][    C1]  ? text_poke_sync+0x20/0x20
[ 2786.759185][    C1]  on_each_cpu_cond_mask+0x3b/0x80
[ 2786.764335][    C1]  ? kmem_cache_alloc_bulk+0xcf/0x3f0
[ 2786.769740][    C1]  text_poke_bp_batch+0x2bb/0x940
[ 2786.774801][    C1]  ? arch_jump_label_transform_apply+0xe/0x20
[ 2786.780898][    C1]  ? mutex_lock_io_nested+0x60/0x60
[ 2786.786139][    C1]  ? text_poke_loc_init+0x680/0x680
[ 2786.791377][    C1]  ? arch_jump_label_transform_queue+0x7d/0xd0
[ 2786.797567][    C1]  text_poke_finish+0x16/0x30
[ 2786.802270][    C1]  arch_jump_label_transform_apply+0x13/0x20
[ 2786.808270][    C1]  static_key_enable_cpuslocked+0x12e/0x250
[ 2786.814256][    C1]  static_key_enable+0x16/0x20
[ 2786.819040][    C1]  toggle_allocation_gate+0xbf/0x480
[ 2786.824352][    C1]  ? show_object+0xa0/0xa0
[ 2786.828797][    C1]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 2786.834819][    C1]  ? print_irqtrace_events+0x210/0x210
[ 2786.840317][    C1]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 2786.846249][    C1]  ? do_raw_spin_unlock+0x137/0x8a0
[ 2786.851482][    C1]  process_one_work+0x8aa/0x11f0
[ 2786.856499][    C1]  ? worker_detach_from_pool+0x260/0x260
[ 2786.862190][    C1]  ? _raw_spin_lock_irqsave+0x120/0x120
[ 2786.867769][    C1]  ? kthread_data+0x4e/0xc0
[ 2786.872301][    C1]  ? wq_worker_running+0x97/0x190
[ 2786.877460][    C1]  worker_thread+0xa5f/0x1210
[ 2786.882196][    C1]  kthread+0x268/0x300
[ 2786.886291][    C1]  ? rcu_lock_release+0x20/0x20
[ 2786.891172][    C1]  ? kthread_blkcg+0xd0/0xd0
[ 2786.895797][    C1]  ret_from_fork+0x1f/0x30
[ 2786.900261][    C1]  </TASK>