468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:55:59 executing program 0:
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000013c0)="6203a105d755af176510122f1eafbcf72be12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e24732caf215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7dfd652684d6a710292ea0c3f", 0xbf}, {&(0x7f00000014c0)="294f28dfe56d898ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0105869a804dd2a44ce42557b2e32e2bf367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876fe9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdec", 0xc1}, {&(0x7f0000000040)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb48bbd3b52d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000004040)="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", 0x358}], 0x4}, 0x0)

23:55:59 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0)
write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000aaaaaaaaaaaa88f7"], 0x1c)

23:55:59 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r1, 0x0, 0x40)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r2, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r2, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:55:59 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}], 0x1}}], 0x1, 0x0, 0x0)

23:55:59 executing program 0:
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000013c0)="6203a105d755af176510122f1eafbcf72be12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e24732caf215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7dfd652684d6a710292ea0c3f", 0xbf}, {&(0x7f00000014c0)="294f28dfe56d898ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0105869a804dd2a44ce42557b2e32e2bf367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876fe9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdec", 0xc1}, {&(0x7f0000000040)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb48bbd3b52d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000004040)="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", 0x358}], 0x4}, 0x0)

23:55:59 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:55:59 executing program 0:
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000013c0)="6203a105d755af176510122f1eafbcf72be12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e24732caf215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7dfd652684d6a710292ea0c3f", 0xbf}, {&(0x7f00000014c0)="294f28dfe56d898ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0105869a804dd2a44ce42557b2e32e2bf367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876fe9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdec", 0xc1}, {&(0x7f0000000040)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb48bbd3b52d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000004040)="6f4720baeb5434a1c17a4b697e4611c434c1947fafd44daee2d61fadd23c3505eee0cc5b6c76cf081390ae92516d567c4b49af0f4b3df75ae92efbfb0fbe60ac8c4e546500f4f8f3885d5622072fb9e9b948a5edc65602c644bee9ad04b655279f383ce068ad0c202a57f9a8804b73d1241fb306b2acd9d5e26a71b19a0b9859ff0f0d7cdbd80fdfacdf9f1d02a37ae44bb6ddd978d4a0e6d61b68f629915748d6d3d184ca2b4164192c60a3a383821d0e85f04d09b712814d4b0664799b7ae6657b7452214608d01d31bd7d9e03107c638353d89515692c24b11490b9e75cfcb489e80b9334f4660204b2a17409993ddc4b0d004709cd46cb2488cf3cecd965e978182dd42cfbbfa4ebda17cce9cfc970959fd29e1a802809aa4a65c8f1c6dd14fca85d83fc995f097a62c6f04fb0d1f0dec0faa41fe09b1eae67606123d908dd74c62e66ee2635ec9da7bc74103debf3e31f0794ca5fc2268bcb8a03aeb3bf860d164e0a6cba7c8dc469147cc7e1bb94731ec450525cf19275d4af40b115f2420ff7ab4eeb41c5ddc19aae1b2e535b796c0e7aa6e71b4e13c8023806a08638d13a8595e310321860c8d7670cf167c67b3b5217a66329505cdcdc3afb3233dbaec65ff45b0bfc3cfbd309a7ffd26507a8ffe782f3b84ad9dfc2b4f44d6716e8ad892ffc3acf6e7e09018041a27fcad1ee957d6fddccc3d41f9b04127dee7c471acf9fdc32f204afffc52b22b73844154285ce5ec58ec57b40ccf7b70215a4a27f9de2c2719dcb5897bc302ebb027c019e40aa6fc85d5b670aef709e40cbe597139537c10d2483b67c02ca781c5ce6c014b13c8dee248e8b75831cbee8f29cad33139e0b5bc86c203c71f54ad11573e8801b8cc623571b9c53ac723b51b2cdd09b60cf8a3a205a70814107251d962d603bf21f42e946462bf3d8bca96d7bdbdfa9ced20f6e9edba4ac6aea0a68c08a3f8076274bece6d676d64975dc1e611806feb81cbac4b38453a756845c866f0458fb61cd12a135e1dfa76d85a3b2972b6517b57bc35a0398f7b87ee0b697c84c629e8a62a7d1dab6459a71f7aad2fac7a1a4c019479b1f31dc017f3fa896000b8bcc0b1ca993447351fa0529a5be311faa90b6d8f0a5ce5fe2adfd4995ba13920826d27677d8dac9ef0aac4cea1517ff318a864b3ea3bcc45d6cbd91e4a8da09c2e320957fcada6a4e", 0x358}], 0x4}, 0x0)

23:55:59 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r1, 0x0, 0x40)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r2, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r2, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:55:59 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0)
write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000aaaaaaaaaaaa88f7"], 0x1c)

[ 2957.754718][ T8412] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[ 2957.762046][T14299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:55:59 executing program 0:
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000013c0)="6203a105d755af176510122f1eafbcf72be12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e24732caf215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7dfd652684d6a710292ea0c3f97b7cbff701684b13c5593262534", 0xcd}, {&(0x7f00000014c0)="294f28dfe56d898ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0105869a804dd2a44ce42557b2e32e2bf367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876fe9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdec", 0xc1}, {&(0x7f0000000040)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb48bbd3b52d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000004040)="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", 0x358}], 0x4}, 0x0)

23:55:59 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r1, 0x0, 0x40)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r2, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r2, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

[ 2957.824924][T14299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2957.836327][ T9786] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 0 (expected 2)
23:55:59 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:55:59 executing program 0:
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000013c0)="6203a105d755af176510122f1eafbcf72be12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e24732caf215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7dfd652684d6a710292ea0c3f97b7cbff701684b13c5593262534", 0xcd}, {&(0x7f00000014c0)="294f28dfe56d898ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0105869a804dd2a44ce42557b2e32e2bf367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876fe9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdec", 0xc1}, {&(0x7f0000000040)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb48bbd3b52d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000004040)="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", 0x358}], 0x4}, 0x0)

23:55:59 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0)
write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000aaaaaaaaaaaa88f7"], 0x1c)

23:55:59 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:55:59 executing program 0:
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000013c0)="6203a105d755af176510122f1eafbcf72be12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e24732caf215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7dfd652684d6a710292ea0c3f97b7cbff701684b13c5593262534", 0xcd}, {&(0x7f00000014c0)="294f28dfe56d898ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0105869a804dd2a44ce42557b2e32e2bf367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876fe9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdec", 0xc1}, {&(0x7f0000000040)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb48bbd3b52d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000004040)="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", 0x358}], 0x4}, 0x0)

23:55:59 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000aaaaaaaaaaaa88f7"], 0x1c)

23:55:59 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:55:59 executing program 0:
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000013c0)="6203a105d755af176510122f1eafbcf72be12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e24732caf215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7dfd652684d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca", 0xd4}, {&(0x7f00000014c0)="294f28dfe56d898ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0105869a804dd2a44ce42557b2e32e2bf367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876fe9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdec", 0xc1}, {&(0x7f0000000040)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb48bbd3b52d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000004040)="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", 0x358}], 0x4}, 0x0)

23:55:59 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:55:59 executing program 0:
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000013c0)="6203a105d755af176510122f1eafbcf72be12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e24732caf215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7dfd652684d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca", 0xd4}, {&(0x7f00000014c0)="294f28dfe56d898ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0105869a804dd2a44ce42557b2e32e2bf367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876fe9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdec", 0xc1}, {&(0x7f0000000040)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb48bbd3b52d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000004040)="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", 0x358}], 0x4}, 0x0)

23:56:00 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:00 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000aaaaaaaaaaaa88f7"], 0x1c)

23:56:00 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:00 executing program 0:
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000013c0)="6203a105d755af176510122f1eafbcf72be12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e24732caf215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7dfd652684d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca", 0xd4}, {&(0x7f00000014c0)="294f28dfe56d898ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0105869a804dd2a44ce42557b2e32e2bf367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876fe9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdec", 0xc1}, {&(0x7f0000000040)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb48bbd3b52d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000004040)="6f4720baeb5434a1c17a4b697e4611c434c1947fafd44daee2d61fadd23c3505eee0cc5b6c76cf081390ae92516d567c4b49af0f4b3df75ae92efbfb0fbe60ac8c4e546500f4f8f3885d5622072fb9e9b948a5edc65602c644bee9ad04b655279f383ce068ad0c202a57f9a8804b73d1241fb306b2acd9d5e26a71b19a0b9859ff0f0d7cdbd80fdfacdf9f1d02a37ae44bb6ddd978d4a0e6d61b68f629915748d6d3d184ca2b4164192c60a3a383821d0e85f04d09b712814d4b0664799b7ae6657b7452214608d01d31bd7d9e03107c638353d89515692c24b11490b9e75cfcb489e80b9334f4660204b2a17409993ddc4b0d004709cd46cb2488cf3cecd965e978182dd42cfbbfa4ebda17cce9cfc970959fd29e1a802809aa4a65c8f1c6dd14fca85d83fc995f097a62c6f04fb0d1f0dec0faa41fe09b1eae67606123d908dd74c62e66ee2635ec9da7bc74103debf3e31f0794ca5fc2268bcb8a03aeb3bf860d164e0a6cba7c8dc469147cc7e1bb94731ec450525cf19275d4af40b115f2420ff7ab4eeb41c5ddc19aae1b2e535b796c0e7aa6e71b4e13c8023806a08638d13a8595e310321860c8d7670cf167c67b3b5217a66329505cdcdc3afb3233dbaec65ff45b0bfc3cfbd309a7ffd26507a8ffe782f3b84ad9dfc2b4f44d6716e8ad892ffc3acf6e7e09018041a27fcad1ee957d6fddccc3d41f9b04127dee7c471acf9fdc32f204afffc52b22b73844154285ce5ec58ec57b40ccf7b70215a4a27f9de2c2719dcb5897bc302ebb027c019e40aa6fc85d5b670aef709e40cbe597139537c10d2483b67c02ca781c5ce6c014b13c8dee248e8b75831cbee8f29cad33139e0b5bc86c203c71f54ad11573e8801b8cc623571b9c53ac723b51b2cdd09b60cf8a3a205a70814107251d962d603bf21f42e946462bf3d8bca96d7bdbdfa9ced20f6e9edba4ac6aea0a68c08a3f8076274bece6d676d64975dc1e611806feb81cbac4b38453a756845c866f0458fb61cd12a135e1dfa76d85a3b2972b6517b57bc35a0398f7b87ee0b697c84c629e8a62a7d1dab6459a71f7aad2fac7a1a4c019479b1f31dc017f3fa896000b8bcc0b1ca993447351fa0529a5be311faa90b6d8f0a5ce5fe2adfd4995ba13920826d27677d8dac9ef0aac4cea1517ff318a864b3ea3bcc45d6cbd91e4a8da09c2e320957fcada6a4e", 0x358}], 0x4}, 0x0)

23:56:00 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:00 executing program 0:
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000013c0)="6203a105d755af176510122f1eafbcf72be12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e24732caf215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7dfd652684d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9", 0xd7}, {&(0x7f00000014c0)="294f28dfe56d898ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0105869a804dd2a44ce42557b2e32e2bf367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876fe9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdec", 0xc1}, {&(0x7f0000000040)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb48bbd3b52d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000004040)="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", 0x358}], 0x4}, 0x0)

[ 2958.248941][T14338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:00 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:00 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000aaaaaaaaaaaa88f7"], 0x1c)

[ 2958.332371][ T9786] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 0 (expected 2)
[ 2958.332761][T14343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:00 executing program 0:
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000013c0)="6203a105d755af176510122f1eafbcf72be12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e24732caf215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7dfd652684d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9", 0xd7}, {&(0x7f00000014c0)="294f28dfe56d898ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0105869a804dd2a44ce42557b2e32e2bf367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876fe9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdec", 0xc1}, {&(0x7f0000000040)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb48bbd3b52d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000004040)="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", 0x358}], 0x4}, 0x0)

23:56:00 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:00 executing program 0:
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000013c0)="6203a105d755af176510122f1eafbcf72be12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e24732caf215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7dfd652684d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9", 0xd7}, {&(0x7f00000014c0)="294f28dfe56d898ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0105869a804dd2a44ce42557b2e32e2bf367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876fe9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdec", 0xc1}, {&(0x7f0000000040)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb48bbd3b52d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000004040)="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", 0x358}], 0x4}, 0x0)

23:56:00 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:00 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, 0x0, 0x1c)

23:56:00 executing program 0:
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000013c0)="6203a105d755af176510122f1eafbcf72be12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e24732caf215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7dfd652684d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de", 0xd9}, {&(0x7f00000014c0)="294f28dfe56d898ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0105869a804dd2a44ce42557b2e32e2bf367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876fe9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdec", 0xc1}, {&(0x7f0000000040)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb48bbd3b52d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000004040)="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", 0x358}], 0x4}, 0x0)

23:56:00 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}], 0x1}}], 0x1, 0x0, 0x0)

23:56:00 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:00 executing program 0:
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000013c0)="6203a105d755af176510122f1eafbcf72be12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e24732caf215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7dfd652684d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de", 0xd9}, {&(0x7f00000014c0)="294f28dfe56d898ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0105869a804dd2a44ce42557b2e32e2bf367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876fe9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdec", 0xc1}, {&(0x7f0000000040)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb48bbd3b52d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000004040)="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", 0x358}], 0x4}, 0x0)

[ 2958.601167][T14362] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
23:56:00 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:00 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, 0x0, 0x1c)

23:56:00 executing program 0:
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000013c0)="6203a105d755af176510122f1eafbcf72be12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e24732caf215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7dfd652684d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de", 0xd9}, {&(0x7f00000014c0)="294f28dfe56d898ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0105869a804dd2a44ce42557b2e32e2bf367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876fe9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdec", 0xc1}, {&(0x7f0000000040)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb48bbd3b52d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000004040)="6f4720baeb5434a1c17a4b697e4611c434c1947fafd44daee2d61fadd23c3505eee0cc5b6c76cf081390ae92516d567c4b49af0f4b3df75ae92efbfb0fbe60ac8c4e546500f4f8f3885d5622072fb9e9b948a5edc65602c644bee9ad04b655279f383ce068ad0c202a57f9a8804b73d1241fb306b2acd9d5e26a71b19a0b9859ff0f0d7cdbd80fdfacdf9f1d02a37ae44bb6ddd978d4a0e6d61b68f629915748d6d3d184ca2b4164192c60a3a383821d0e85f04d09b712814d4b0664799b7ae6657b7452214608d01d31bd7d9e03107c638353d89515692c24b11490b9e75cfcb489e80b9334f4660204b2a17409993ddc4b0d004709cd46cb2488cf3cecd965e978182dd42cfbbfa4ebda17cce9cfc970959fd29e1a802809aa4a65c8f1c6dd14fca85d83fc995f097a62c6f04fb0d1f0dec0faa41fe09b1eae67606123d908dd74c62e66ee2635ec9da7bc74103debf3e31f0794ca5fc2268bcb8a03aeb3bf860d164e0a6cba7c8dc469147cc7e1bb94731ec450525cf19275d4af40b115f2420ff7ab4eeb41c5ddc19aae1b2e535b796c0e7aa6e71b4e13c8023806a08638d13a8595e310321860c8d7670cf167c67b3b5217a66329505cdcdc3afb3233dbaec65ff45b0bfc3cfbd309a7ffd26507a8ffe782f3b84ad9dfc2b4f44d6716e8ad892ffc3acf6e7e09018041a27fcad1ee957d6fddccc3d41f9b04127dee7c471acf9fdc32f204afffc52b22b73844154285ce5ec58ec57b40ccf7b70215a4a27f9de2c2719dcb5897bc302ebb027c019e40aa6fc85d5b670aef709e40cbe597139537c10d2483b67c02ca781c5ce6c014b13c8dee248e8b75831cbee8f29cad33139e0b5bc86c203c71f54ad11573e8801b8cc623571b9c53ac723b51b2cdd09b60cf8a3a205a70814107251d962d603bf21f42e946462bf3d8bca96d7bdbdfa9ced20f6e9edba4ac6aea0a68c08a3f8076274bece6d676d64975dc1e611806feb81cbac4b38453a756845c866f0458fb61cd12a135e1dfa76d85a3b2972b6517b57bc35a0398f7b87ee0b697c84c629e8a62a7d1dab6459a71f7aad2fac7a1a4c019479b1f31dc017f3fa896000b8bcc0b1ca993447351fa0529a5be311faa90b6d8f0a5ce5fe2adfd4995ba13920826d27677d8dac9ef0aac4cea1517ff318a864b3ea3bcc45d6cbd91e4a8da09c2e320957fcada6a4e", 0x358}], 0x4}, 0x0)

23:56:00 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:00 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

[ 2958.688551][T14370] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2958.741678][ T2749] wlan1: authentication with 08:02:11:00:00:00 timed out
23:56:00 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:00 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

[ 2958.787072][T14378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2958.799385][T14379] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
23:56:00 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, 0x0, 0x1c)

[ 2958.858607][T14378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2958.871775][T14381] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
23:56:00 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

[ 2958.920594][T14383] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
23:56:00 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:00 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000000)=ANY=[], 0x1c)

[ 2958.984797][ T1254] ieee802154 phy0 wpan0: encryption failed: -22
[ 2958.992438][ T1254] ieee802154 phy1 wpan1: encryption failed: -22
[ 2959.009222][T14389] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
23:56:00 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x60, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x7f}}}]}]}, @TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000}}]}]}}]}, 0x90}}, 0x0)

23:56:00 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b1000000000000002800"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

[ 2959.085178][T14393] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
23:56:01 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000000)=ANY=[], 0x1c)

[ 2959.145596][T14395] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
23:56:01 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:01 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x3a0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:01 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b1000000000000002800"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:01 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8100}}}}, 0x1a)

23:56:01 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b1000000000000002800"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

[ 2959.292357][T14405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:01 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000000)=ANY=[], 0x1c)

23:56:01 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8100}}}}, 0x1a)

23:56:01 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c0001"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

[ 2959.355198][T14405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:01 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}], 0x1}}], 0x1, 0x0, 0x0)

23:56:01 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c0001"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:01 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1c)

23:56:01 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c0001"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:01 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8100}}}}, 0x1a)

23:56:01 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c0001007665"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:01 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1c)

23:56:01 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:01 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8100}}}}, 0x1a)

23:56:01 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1c)

23:56:01 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c0001007665"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

[ 2959.752614][T14436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2959.817167][T14436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:01 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8100}}}}, 0x1a)

23:56:01 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c0001007665"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:01 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1c)

23:56:01 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8100}}}}, 0x1a)

23:56:01 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c000100766574"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:02 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1c)

23:56:02 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c000100766574"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:02 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8100}}}}, 0x1a)

23:56:02 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

[ 2960.229274][T14469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:02 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1c)

23:56:02 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c000100766574"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:02 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8100}}}}, 0x1a)

[ 2960.291349][T14469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:02 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}], 0x1}}], 0x1, 0x0, 0x0)

23:56:02 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8100}}}}, 0x1a)

23:56:02 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:02 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000aaaaaaaa"], 0x1c)

23:56:02 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:02 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8100}}}}, 0x1a)

23:56:02 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:02 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:02 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:02 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000aaaaaaaa"], 0x1c)

23:56:02 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8100}}}}, 0x1a)

23:56:02 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

[ 2960.729124][T14500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:02 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:02 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000aaaaaaaa"], 0x1c)

[ 2960.806192][T14500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:02 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:02 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8100}}}}, 0x1a)

23:56:02 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:02 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000aaaaaaaaaaaa"], 0x1c)

23:56:02 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:02 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:02 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8100}}}}, 0x1a)

23:56:03 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000aaaaaaaaaaaa"], 0x1c)

23:56:03 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:03 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:03 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80), 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}], 0x1}}], 0x1, 0x0, 0x0)

[ 2961.230862][T14538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:03 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:03 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000aaaaaaaaaaaa"], 0x1c)

[ 2961.320128][T14538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:03 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f70000", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:03 executing program 0:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8100}}}}, 0x1a)

23:56:03 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000aaaaaaaaaaaa88"], 0x1c)

23:56:03 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f70000", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:03 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f70000", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:03 executing program 0:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8100}}}}, 0x1a)

23:56:03 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000aaaaaaaaaaaa88"], 0x1c)

23:56:03 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f700000000000000", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:03 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:03 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f700000000000000", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

[ 2961.722671][T14576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2961.737377][T14574] __nla_validate_parse: 15 callbacks suppressed
[ 2961.737458][T14574] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
23:56:03 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000aaaaaaaaaaaa88"], 0x1c)

[ 2961.784799][T14576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:03 executing program 0:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8100}}}}, 0x1a)

23:56:03 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f700000000000000", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

[ 2961.842359][T14580] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
23:56:03 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f700"/18, @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

[ 2961.922754][T14587] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
23:56:03 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a467"}}}}, 0x1c)

23:56:03 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8100}}}}, 0x1a)

[ 2962.018212][T14592] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
23:56:03 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f700"/18, @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:04 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:04 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80), 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}], 0x1}}], 0x1, 0x0, 0x0)

23:56:04 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a467"}}}}, 0x1c)

[ 2962.111659][T14599] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
23:56:04 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f700"/18, @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:04 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f700"/19, @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

[ 2962.209720][T14605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2962.234489][T14610] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
23:56:04 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a467"}}}}, 0x1c)

23:56:04 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8100}}}}, 0x1a)

[ 2962.294962][T14605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2962.304286][T14612] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
23:56:04 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f700"/19, @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:04 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f700"/19, @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

[ 2962.425525][T14618] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
23:56:04 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a467"}}}}, 0x1c)

[ 2962.482828][T14623] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
23:56:04 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:04 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8100}}}}, 0x1a)

23:56:04 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:04 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a467"}}}}, 0x1c)

[ 2962.595117][T14628] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
23:56:04 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:04 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a467"}}}}, 0x1c)

[ 2962.710727][T14636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2962.792319][T14641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:04 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8100}}}}, 0x1a)

23:56:04 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:04 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a467"}}}}, 0x1c)

23:56:04 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8100}}}}, 0x1a)

23:56:04 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80), 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}], 0x1}}], 0x1, 0x0, 0x0)

23:56:04 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a467"}}}}, 0x1c)

23:56:04 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:05 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:05 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8100}}}}, 0x1a)

23:56:05 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a467"}}}}, 0x1c)

23:56:05 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

[ 2963.189090][T14662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:05 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8100}}}}, 0x1a)

[ 2963.262138][T14667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:05 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a467"}}}}, 0x1c)

23:56:05 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:05 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8100}}}}, 0x1a)

23:56:05 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:05 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a467"}}}}, 0x1c)

23:56:05 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:05 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

[ 2963.675284][T14690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:05 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8100}}}}, 0x1a)

[ 2963.748870][T14690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:05 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a467"}}}}, 0x1c)

23:56:05 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:05 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}], 0x1}}], 0x1, 0x0, 0x0)

23:56:05 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}], 0x1}}], 0x1, 0x0, 0x0)

23:56:05 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8100}}}}, 0x1a)

23:56:05 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:06 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a467"}}}}, 0x1c)

23:56:06 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:06 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}], 0x1}}], 0x1, 0x0, 0x0)

[ 2964.203636][T14723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:06 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)

[ 2964.289284][T14723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:06 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:06 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)

23:56:06 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8100}}}}, 0x1a)

23:56:06 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)

23:56:06 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:06 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00), 0x0, 0x0, 0x0)

23:56:06 executing program 3:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a467"}}}}, 0x1c)

23:56:06 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:06 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8100}}}}, 0x1a)

[ 2964.775181][T14754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:06 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00), 0x0, 0x0, 0x0)

[ 2964.863356][T14754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:06 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00), 0x0, 0x0, 0x0)

23:56:06 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

23:56:06 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:06 executing program 3:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a467"}}}}, 0x1c)

23:56:06 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

23:56:07 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8100}}}}, 0x1a)

23:56:07 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:07 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

23:56:07 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

[ 2965.308972][T14786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:07 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)}}], 0x1, 0x0, 0x0)

23:56:07 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8100}}}}, 0x1a)

23:56:07 executing program 3:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a467"}}}}, 0x1c)

[ 2965.410348][T14786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:07 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)}}], 0x1, 0x0, 0x0)

23:56:07 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:07 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)}}], 0x1, 0x0, 0x0)

23:56:07 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)

23:56:07 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8100}}}}, 0x1a)

23:56:07 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a467"}}}}, 0x1c)

23:56:07 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:07 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:07 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)

23:56:07 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)

[ 2965.848831][T14830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2965.882037][T25601] wlan1: authenticate with 08:02:11:00:00:00
23:56:07 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

[ 2965.901861][T25601] wlan1: No basic rates, using min rate instead
[ 2965.922465][T25601] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
23:56:07 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

[ 2965.961079][ T9790] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 0 (expected 2)
[ 2965.961403][T14830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2966.031557][ T9790] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
23:56:07 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:07 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0x0, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8100}}}}, 0x1a)

23:56:07 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a467"}}}}, 0x1c)

23:56:08 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

[ 2966.152571][ T8410] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
23:56:08 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:08 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

[ 2966.261536][ T8412] wlan1: authentication with 08:02:11:00:00:00 timed out
23:56:08 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:08 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:08 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a467"}}}}, 0x1c)

23:56:08 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="080002"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

[ 2966.424472][T14866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2966.464377][T25601] wlan1: authenticate with 08:02:11:00:00:00
23:56:08 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0x0, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8100}}}}, 0x1a)

[ 2966.470672][T25601] wlan1: No basic rates, using min rate instead
[ 2966.487145][T14866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2966.500262][T25601] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2966.516396][ T9789] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 0 (expected 2)
23:56:08 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="080002"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:08 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a467"}}}}, 0x1c)

[ 2966.641684][ T8412] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
23:56:08 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="080002"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

[ 2966.752533][ T9789] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
23:56:08 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:08 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0x0, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8100}}}}, 0x1a)

23:56:08 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a467"}}}}, 0x1c)

[ 2966.829588][T14885] __nla_validate_parse: 25 callbacks suppressed
[ 2966.829606][T14885] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2966.862461][ T8412] wlan1: authentication with 08:02:11:00:00:00 timed out
[ 2966.910292][T14889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2966.942283][T20126] wlan1: authenticate with 08:02:11:00:00:00
[ 2966.949721][T20126] wlan1: No basic rates, using min rate instead
[ 2966.957192][T20126] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2966.983402][T14889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2966.993268][ T9786] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 0 (expected 2)
23:56:08 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:08 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a467"}}}}, 0x1c)

[ 2967.071719][ T9789] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[ 2967.086226][T14898] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
23:56:09 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8100}}}}, 0x1a)

23:56:09 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

[ 2967.192130][ T9789] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
23:56:09 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8100}}}}, 0x1a)

23:56:09 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a467"}}}}, 0x1c)

23:56:09 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

[ 2967.258846][T14905] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
23:56:09 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

[ 2967.301588][ T9789] wlan1: authentication with 08:02:11:00:00:00 timed out
23:56:09 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8100}}}}, 0x1a)

23:56:09 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

[ 2967.402604][T14917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2967.441027][T25601] wlan1: authenticate with 08:02:11:00:00:00
23:56:09 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a467"}}}}, 0x1c)

23:56:09 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0)
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8100}}}}, 0x1a)

[ 2967.457611][T25601] wlan1: No basic rates, using min rate instead
[ 2967.478038][T14917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2967.490925][T25601] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2967.519487][T14922] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
23:56:09 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:09 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0)
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8100}}}}, 0x1a)

[ 2967.615815][ T9790] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[ 2967.670638][T14932] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
23:56:09 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a467"}}}}, 0x1c)

[ 2967.715187][T14932] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2967.732449][ T9789] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
23:56:09 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0)
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8100}}}}, 0x1a)

23:56:09 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:09 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

[ 2967.851607][ T9790] wlan1: authentication with 08:02:11:00:00:00 timed out
23:56:09 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8100}}}}, 0x1a)

[ 2967.916445][T14945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2967.926730][T14944] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2967.952038][ T4528] wlan1: authenticate with 08:02:11:00:00:00
[ 2967.959312][ T4528] wlan1: No basic rates, using min rate instead
23:56:09 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a467"}}}}, 0x1c)

[ 2967.966722][ T4528] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2967.980274][T14945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2967.982885][ T9790] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 0 (expected 2)
[ 2968.029147][T14944] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
23:56:09 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8100}}}}, 0x1a)

[ 2968.081719][ T8410] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
23:56:10 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:10 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:10 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a467"}}}}, 0x1c)

[ 2968.191677][ T9789] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
23:56:10 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8100}}}}, 0x1a)

[ 2968.252667][T14960] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
23:56:10 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

[ 2968.323840][T14967] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2968.343573][ T2749] wlan1: authentication with 08:02:11:00:00:00 timed out
23:56:10 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

[ 2968.416455][T14971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:10 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, 0x0, 0x0)

23:56:10 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a467"}}}}, 0x1c)

[ 2968.483253][T20126] wlan1: authenticate with 08:02:11:00:00:00
[ 2968.489434][T20126] wlan1: No basic rates, using min rate instead
[ 2968.492696][T14971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2968.512392][T20126] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
23:56:10 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:10 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, 0x0, 0x0)

23:56:10 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a467"}}}}, 0x1c)

[ 2968.642295][ T9790] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
23:56:10 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:10 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, 0x0, 0x0)

[ 2968.761470][ T2749] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
23:56:10 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:10 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

[ 2968.871562][ T9790] wlan1: authentication with 08:02:11:00:00:00 timed out
23:56:10 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local}}, 0x1a)

23:56:10 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a467"}}}}, 0x1c)

[ 2968.953688][T15000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2968.992188][T18994] wlan1: authenticate with 08:02:11:00:00:00
[ 2968.998518][T18994] wlan1: No basic rates, using min rate instead
[ 2969.010844][T18994] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
23:56:10 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:10 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmmsg(0xffffffffffffffff, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

[ 2969.046922][ T9790] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 0 (expected 2)
[ 2969.047148][T15000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:11 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local}}, 0x1a)

23:56:11 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmmsg(0xffffffffffffffff, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

[ 2969.121547][ T9790] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
23:56:11 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmmsg(0xffffffffffffffff, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

[ 2969.231609][ T8412] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
23:56:11 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a467"}}}}, 0x1c)

23:56:11 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:11 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:11 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local}}, 0x1a)

23:56:11 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:11 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

[ 2969.351466][ T8410] wlan1: authentication with 08:02:11:00:00:00 timed out
23:56:11 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

[ 2969.515198][T15035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:11 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

[ 2969.555878][T20126] wlan1: authenticate with 08:02:11:00:00:00
[ 2969.570391][T20126] wlan1: No basic rates, using min rate instead
[ 2969.585000][T20126] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
23:56:11 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:11 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}, @IFLA_MTU={0x8, 0x4, 0x200044}]}, 0x44}, 0x9}, 0x0)

23:56:11 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0x0, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a467"}}}}, 0x1c)

[ 2969.603353][ T8412] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 0 (expected 2)
[ 2969.603652][T15035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:11 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:11 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="fa04fd", 0x3)

[ 2969.701693][ T9789] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
23:56:11 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:11 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:11 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e29f)
mmap(&(0x7f0000432000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r0, 0x6d3c9000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000100)=0x3b)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000003a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f0000000040)={@null, @null})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8db4c6d3916872c4d26e8e39f30e9ce9ab2f204389cf53c6", 0x18)

[ 2969.811570][ T2749] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
23:56:11 executing program 2:
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:11 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0x0, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a467"}}}}, 0x1c)

23:56:11 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

[ 2969.921645][ T9789] wlan1: authentication with 08:02:11:00:00:00 timed out
23:56:11 executing program 2:
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:11 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

[ 2970.028986][T15071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2970.064568][T25601] wlan1: authenticate with 08:02:11:00:00:00
[ 2970.071736][T25601] wlan1: No basic rates, using min rate instead
23:56:12 executing program 2:
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

[ 2970.086487][T25601] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2970.114729][ T9789] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 0 (expected 2)
[ 2970.127852][T15079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:12 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

[ 2970.214819][ T9789] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
23:56:12 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:12 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0x0, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a467"}}}}, 0x1c)

[ 2970.277695][   T27] audit: type=1804 audit(1709337372.137:518): pid=15066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2875886668/syzkaller.v18YR2/964/cgroup.controllers" dev="sda1" ino=2007 res=1 errno=0
23:56:12 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:12 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="20000000140021010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

[ 2970.332053][ T9790] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
23:56:12 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:12 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x1f}, 0x1c)
connect$inet6(r0, &(0x7f0000000640)={0xa, 0x0, 0x0, @mcast1, 0x400}, 0x1c)

23:56:12 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

[ 2970.441592][ T9790] wlan1: authentication with 08:02:11:00:00:00 timed out
23:56:12 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:12 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:12 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="20000000140021010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:12 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0x7f}]}}}]}, 0x3c}}, 0x0)

[ 2970.587624][T15104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2970.623326][T20126] wlan1: authenticate with 08:02:11:00:00:00
[ 2970.630658][T20126] wlan1: No basic rates, using min rate instead
23:56:12 executing program 0:
unshare(0x400)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendfile(r1, r0, 0x0, 0x0)

[ 2970.672828][T15104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2970.678095][T20126] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
23:56:12 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:12 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a467"}}}}, 0x1c)

23:56:12 executing program 0:
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001740), 0x10)

23:56:12 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:12 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="20000000140021010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:12 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a467"}}}}, 0x1c)

23:56:12 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:12 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}, 0x2}}]}, 0x138}}, 0x0)

23:56:12 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3f472d06182678abef05c89d8", 0x99}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:12 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:12 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a467"}}}}, 0x1c)

23:56:12 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:12 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:12 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000001400210100000008000000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:12 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000100)={@val, @void, @eth={@link_local, @local, @void}}, 0x12)

[ 2971.066614][T15143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:13 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:13 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0)
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a467"}}}}, 0x1c)

[ 2971.143386][T15143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2971.155457][ T8410] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 0 (expected 2)
23:56:13 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:13 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000100)={@val, @void, @eth={@link_local, @local, @void}}, 0x12)

23:56:13 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:13 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000001400210100000008000000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:13 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0)
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a467"}}}}, 0x1c)

23:56:13 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:13 executing program 0:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0)

23:56:13 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:13 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:13 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:13 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000001400210100000008000000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:13 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0)
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a467"}}}}, 0x1c)

23:56:13 executing program 0:
unshare(0x400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20)

23:56:13 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

[ 2971.572175][T15179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:13 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_POLICE={0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x40}}, 0x0)

[ 2971.646189][T15187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2971.648660][ T9790] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 0 (expected 2)
23:56:13 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000001400210100000008000000000201", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:13 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:13 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_POLICE={0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x40}}, 0x0)

23:56:13 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a467"}}}}, 0x1c)

23:56:13 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

[ 2971.782127][ T9790] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
23:56:13 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_POLICE={0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x40}}, 0x0)

23:56:13 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:13 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a467"}}}}, 0x1c)

[ 2971.867326][T15198] __nla_validate_parse: 21 callbacks suppressed
[ 2971.867343][T15198] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2971.891727][ T8410] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
23:56:13 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:13 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000001400210100000008000000000201", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

[ 2971.942637][T15207] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
23:56:13 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_POLICE={0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x40}}, 0x0)

23:56:13 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

[ 2972.001513][ T8412] wlan1: authentication with 08:02:11:00:00:00 timed out
23:56:13 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:13 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a467"}}}}, 0x1c)

[ 2972.068129][T15215] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2972.096322][T15214] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
23:56:14 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:14 executing program 0:
unshare(0x400)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003b00), 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001000)={r0}, 0x20)

[ 2972.138314][T15220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2972.165998][T15221] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
23:56:14 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:14 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f000000d440)={0x0, 0x0, &(0x7f000000d400)={&(0x7f000000d4c0)=ANY=[], 0xccb4}}, 0x0)

[ 2972.213735][T15217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:14 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, 0x0, 0x0)

23:56:14 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000001400210100000008000000000201", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:14 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:14 executing program 0:
unshare(0x400)
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x20104, 0x9, 0x1, 0x1}, 0x48)
bpf$BPF_PROG_DETACH(0x4, &(0x7f00000006c0)={@map=r0, 0xffffffffffffffff, 0x7}, 0x10)

23:56:14 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

[ 2972.377407][T15239] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
23:56:14 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, 0x0, 0x0)

23:56:14 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

[ 2972.422762][T15239] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
23:56:14 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:14 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:14 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="20000000140021010000000800000000020100", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:14 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:14 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, 0x0, 0x0)

[ 2972.606790][T15253] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2972.638485][T15255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2972.655347][T15253] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2972.671927][T18994] wlan1: authenticate with 08:02:11:00:00:00
[ 2972.678031][T18994] wlan1: No basic rates, using min rate instead
[ 2972.686116][T18994] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
23:56:14 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

[ 2972.706752][ T9789] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 0 (expected 2)
[ 2972.707056][T15255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:14 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="20000000140021010000000800000000020100", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:14 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:14 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x0, "a467"}}}}, 0x1c)

[ 2972.809111][T15263] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2972.819974][ T9786] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
23:56:14 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="20000000140021010000000800000000020100", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:14 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x0, "a467"}}}}, 0x1c)

[ 2972.951697][ T8410] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
23:56:14 executing program 4:
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r1, 0x0, 0x40)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r2, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r2, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:14 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:14 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x0, "a467"}}}}, 0x1c)

[ 2973.063140][ T9789] wlan1: authentication with 08:02:11:00:00:00 timed out
23:56:15 executing program 4:
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r1, 0x0, 0x40)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r2, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r2, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

[ 2973.132394][T15273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2973.158536][T27986] wlan1: authenticate with 08:02:11:00:00:00
[ 2973.174210][T27986] wlan1: No basic rates, using min rate instead
23:56:15 executing program 4:
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r1, 0x0, 0x40)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r2, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r2, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

[ 2973.191768][T27986] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2973.200980][T15281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2973.213445][ T8410] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 0 (expected 2)
23:56:15 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863}}}}, 0x1a)

23:56:15 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)

23:56:15 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:15 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863}}}}, 0x1a)

23:56:15 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)

23:56:15 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)

23:56:15 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863}}}}, 0x1a)

23:56:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:15 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

23:56:15 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

[ 2973.598382][T15302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:15 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:15 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a4"}}}}, 0x1b)

[ 2973.666467][ T9786] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 0 (expected 2)
[ 2973.666567][T15302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:15 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

[ 2973.721549][ T9786] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
23:56:15 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)

23:56:15 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a4"}}}}, 0x1b)

23:56:15 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)

[ 2973.846843][ T9786] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
23:56:15 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0)

23:56:15 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val, {@generic={0x8863, "a4"}}}}, 0x1b)

23:56:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

[ 2973.971526][ T9786] wlan1: authentication with 08:02:11:00:00:00 timed out
23:56:15 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:15 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:16 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x3, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x4, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

[ 2974.100688][T15327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2974.149736][T27986] wlan1: authenticate with 08:02:11:00:00:00
[ 2974.156266][T27986] wlan1: No basic rates, using min rate instead
[ 2974.164440][T27986] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2974.182736][ T9786] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 0 (expected 2)
23:56:16 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0)

23:56:16 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

[ 2974.194716][T15332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:16 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:16 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]}]}}]}, 0x74}}, 0x0)

[ 2974.281703][ T8410] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
23:56:16 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}}]}]}}]}, 0x74}}, 0x0)

23:56:16 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:16 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5, 0x3, 0x11}]}}}]}, 0x3c}}, 0x0)

23:56:16 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:16 executing program 3:
unshare(0x400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r0, &(0x7f0000000040), 0x0}, 0x20)

[ 2974.411667][ T9789] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
23:56:16 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1d0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:16 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:16 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}}, 0x0)

23:56:16 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1d0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

[ 2974.531553][ T9786] wlan1: authentication with 08:02:11:00:00:00 timed out
23:56:16 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:16 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x18, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0)

[ 2974.595259][T15357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2974.624462][T18994] wlan1: authenticate with 08:02:11:00:00:00
[ 2974.630556][T18994] wlan1: No basic rates, using min rate instead
23:56:16 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1d0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

[ 2974.651040][T18994] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2974.668173][T15357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2974.671788][ T8410] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 0 (expected 2)
23:56:16 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="a2fc16f22b02a9564ec5225b23e2b2de2a2dfb5150e0b28ad53dd463da47f2798dd6393610bbdcebcb1c7cf208c73ec78c5a102de1342b70caefe329576a36ba179eaa3ed0ad1387452c2d46cd29ca6d1df2ce3e46e783770ecebadc075aef9145bb96b7b0b29ba8e19cd4ac35fadde131d905b7d9b9c1b6a13a9391dc3722a7eac0de6125ddf1ee4ad648dcfed669ed3735f06cd3fa59791ae95cc134441be7f60c5e2129cb5900f333bcbc16d4de3fec6a9487fb277a7e1c2ef863ed70cf05b06f3f7554b17bcd193505d2b3333fa6a716a3bbd03a71da94bdc1f3dd77b8b076b41327060ce3841df5c3e794e242c03456d1c30dba00037749d61699f39a8ed60a4e6b5dd6066043d295922dce45b4d1c21cbbf7065bc27f5f101e09bf840df024a917e8dddf1d931f5809a52c485fd288fdb1e6439ff5797acb8ccd5414ebf0058ac8626d50caf7b914f8f7a8e2efdf3c998b121f3c904c77104b4410cfc03650fe1622f3a326d4c1958068dcd8792697b3d2bf76cd97cce30ce0e148954a66ca42d63d478b73691697fadabe6068cd0edc23129748102b9b2c1d7a1ad3aa6fe8fb3a00431f8649f9dfabab40773b76b4d039558cf41aadb26b299d31ca1baaa3db7da93a0bd5225d6aa47ac1f3aa", 0x1d0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:16 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x18, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0)

23:56:16 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:16 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
write$binfmt_elf64(r2, 0x0, 0x40)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r3, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000080000000002010000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@ipv4_deladdr={0x18, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0)

23:56:16 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:16 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:16 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f00)=ANY=[@ANYBLOB="440400002800270d00"/20, @ANYRES32=r5, @ANYBLOB="0400000000000000000000000b0001006367726f757000000c0402000804020004"], 0x444}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000021c0)=ANY=[@ANYBLOB="881200002900270d00"/20, @ANYRES32=r5, @ANYBLOB='D'], 0x1288}}, 0x0)

23:56:16 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="a2fc16f22b02a9564ec5225b23e2b2de2a2dfb5150e0b28ad53dd463da47f2798dd6393610bbdcebcb1c7cf208c73ec78c5a102de1342b70caefe329576a36ba179eaa3ed0ad1387452c2d46cd29ca6d1df2ce3e46e783770ecebadc075aef9145bb96b7b0b29ba8e19cd4ac35fadde131d905b7d9b9c1b6a13a9391dc3722a7eac0de6125ddf1ee4ad648dcfed669ed3735f06cd3fa59791ae95cc134441be7f60c5e2129cb5900f333bcbc16d4de3fec6a9487fb277a7e1c2ef863ed70cf05b06f3f7554b17bcd193505d2b3333fa6a716a3bbd03a71da94bdc1f3dd77b8b076b41327060ce3841df5c3e794e242c03456d1c30dba00037749d61699f39a8ed60a4e6b5dd6066043d295922dce45b4d1c21cbbf7065bc27f5f101e09bf840df024a917e8dddf1d931f5809a52c485fd288fdb1e6439ff5797acb8ccd5414ebf0058ac8626d50caf7b914f8f7a8e2efdf3c998b121f3c904c77104b4410cfc03650fe1622f3a326d4c1958068dcd8792697b3d2bf76cd97cce30ce0e148954a66ca42d63d478b73691697fadabe6068cd0edc23129748102b9b2c1d7a1ad3aa6fe8fb3a00431f8649f9dfabab40773b76b4d039558cf41aadb26b299d31ca1baaa3db7da93a0bd5225d6aa47ac1f3aa", 0x1d0}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:16 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="a2fc16f22b02a9564ec5225b23e2b2de2a2dfb5150e0b28ad53dd463da47f2798dd6393610bbdcebcb1c7cf208c73ec78c5a102de1342b70caefe329576a36ba179eaa3ed0ad1387452c2d46cd29ca6d1df2ce3e46e783770ecebadc075aef9145bb96b7b0b29ba8e19cd4ac35fadde131d905b7d9b9c1b6a13a9391dc3722a7eac0de6125ddf1ee4ad648dcfed669ed3735f06cd3fa59791ae95cc134441be7f60c5e2129cb5900f333bcbc16d4de3fec6a9487fb277a7e1c2ef863ed70cf05b06f3f7554b17bcd193505d2b3333fa6a716a3bbd03a71da94bdc1f3dd77b8b076b41327060ce3841df5c3e794e242c03456d1c30dba00037749d61699f39a8ed60a4e6b5dd6066043d295922dce45b4d1c21cbbf7065bc27f5f101e09bf840df024a917e8dddf1d931f5809a52c485fd288fdb1e6439ff5797acb8ccd5414ebf0058ac8626d50caf7b914f8f7a8e2efdf3c998b121f3c904c77104b4410cfc03650fe1622f3a326d4c1958068dcd8792697b3d2bf76cd97cce30ce0e148954a66ca42d63d478b73691697fadabe6068cd0edc23129748102b9b2c1d7a1ad3aa6fe8fb3a00431f8649f9dfabab40773b76b4d039558cf41aadb26b299d31ca1baaa3db7da93a0bd5225d6aa47ac1f3aa", 0x1d0}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:16 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5, 0x3}]}}}]}, 0x3c}}, 0x0)

23:56:16 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:16 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1d0}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:16 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0)

23:56:16 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:17 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="a2fc16f22b02a9564ec5225b23e2b2de2a2dfb5150e0b28ad53dd463da47f2798dd6393610bbdcebcb1c7cf208c73ec78c5a102de1342b70caefe329576a36ba179eaa3ed0ad1387452c2d46cd29ca6d1df2ce3e46e783770ecebadc075aef9145bb96b7b0b29ba8e19cd4ac35fadde131d905b7d9b9c1b6a13a9391dc3722a7eac0de6125ddf1ee4ad648dcfed669ed3735f06cd3fa59791ae95cc134441be7f60c5e2129cb5900f333bcbc16d4de3fec6a9487fb277a7e1c2ef863ed70cf05b06f3f7554b17bcd193505d2b3333fa6a716a3bbd03a71da94bdc1f3dd77b8b076b41327060ce3841df5c3e794e242c03456d1c30dba00037749d61699f39a8ed60a4e6b5dd6066043d295922dce45b4d1c21cbbf7065bc27f5f101e09bf840df024a917e8dddf1d931f5809a52c485fd288fdb1e6439ff5797acb8ccd5414ebf0058ac8626d50caf7b914f8f7a8e2efdf3c998b121f3c904c77104b4410cfc03650fe1622f3a326d4c1958068dcd8792697b3d2bf76cd97cce30ce0e148954a66ca42d63d478b73691697fadabe6068cd0edc23129748102b9b2c1d7a1ad3aa6fe8fb3a00431f8649f9dfabab40773b76b4d039558cf41aadb26b299d31ca1baaa3db7da93a0bd5225d6aa47ac1f3aa", 0x1d0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

[ 2975.088534][T15389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:17 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1d0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

[ 2975.161683][T15389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2975.162888][ T8410] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 0 (expected 2)
23:56:17 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1d0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:17 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1d0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:17 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1d0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:17 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0)

23:56:17 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1d0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:17 executing program 3:
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1d0}}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:17 executing program 3:
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1d0}}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:17 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:17 executing program 3:
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1d0}}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:17 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="a2fc16f22b02a9564ec5225b23e2b2de2a2dfb5150e0b28ad53dd463da47f2798dd6393610bbdcebcb1c7cf208c73ec78c5a102de1342b70caefe329576a36ba179eaa3ed0ad1387452c2d46cd29ca6d1df2ce3e46e783770ecebadc075aef9145bb96b7b0b29ba8e19cd4ac35fadde131d905b7d9b9c1b6a13a9391dc3722a7eac0de6125ddf1ee4ad648dcfed669ed3735f06cd3fa59791ae95cc134441be7f60c5e2129cb5900f333bcbc16d4de3fec6a9487fb277a7e1c2ef863ed70cf05b06f3f7554b17bcd193505d2b3333fa6a716a3bbd03a71da94bdc1f3dd77b8b076b41327060ce3841df5c3e794e242c03456d1c30dba00037749d61699f39a8ed60a4e6b5dd6066043d295922dce45b4d1c21cbbf7065bc27f5f101e09bf840df024a917e8dddf1d931f5809a52c485fd288fdb1e6439ff5797acb8ccd5414ebf0058ac8626d50caf7b914f8f7a8e2efdf3c998b121f3c904c77104b4410cfc03650fe1622f3a326d4c1958068dcd8792697b3d2bf76cd97cce30ce0e148954a66ca42d63d478b73691697fadabe6068cd0edc23129748102b9b2c1d7a1ad3aa6fe8fb3a00431f8649f9dfabab40773b76b4d039558cf41aadb26b299d31ca1baaa3db7da93a0bd5225d6aa47ac1f3aa", 0x1d0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

[ 2975.596958][T15422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:17 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0)

23:56:17 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1d0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

[ 2975.670117][T15422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2975.671617][ T8412] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 0 (expected 2)
23:56:17 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1d0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:17 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1d0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

[ 2975.781800][ T9790] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
23:56:17 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1d0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:17 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="a2fc16f22b02a9564ec5225b23e2b2de2a2dfb5150e0b28ad53dd463da47f2798dd6393610bbdcebcb1c7cf208c73ec78c5a102de1342b70caefe329576a36ba179eaa3ed0ad1387452c2d46cd29ca6d1df2ce3e46e783770ecebadc075aef9145bb96b7b0b29ba8e19cd4ac35fadde131d905b7d9b9c1b6a13a9391dc3722a7eac0de6125ddf1ee4ad648dcfed669ed3735f06cd3fa59791ae95cc134441be7f60c5e2129cb5900f333bcbc16d4de3fec6a9487fb277a7e1c2ef863ed70cf05b06f3f7554b17bcd193505d2b3333fa6a716a3bbd03a71da94bdc1f3dd77b8b076b41327060ce3841df5c3e794e242c03456d1c30dba00037749d61699f39a8ed60a4e6b5dd6066043d295922dce45b4d1c21cbbf7065bc27f5f101e09bf840df024a917e8dddf1d931f5809a52c485fd288fdb1e6439ff5797acb8ccd5414ebf0058ac8626d50caf7b914f8f7a8e2efdf3c998b121f3c904c77104b4410cfc03650fe1622f3a326d4c1958068dcd8792697b3d2bf76cd97cce30ce0e148954a66ca42d63d478b73691697fadabe6068cd0edc23129748102b9b2c1d7a1ad3aa6fe8fb3a00431f8649f9dfabab40773b76b4d039558cf41aadb26b299d31ca1baaa3db7da93a0bd5225d6aa47ac1f3aa", 0x1d0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

[ 2975.901722][ T8412] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
23:56:17 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1d0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:17 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0)

23:56:17 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

[ 2976.022287][ T9789] wlan1: authentication with 08:02:11:00:00:00 timed out
23:56:17 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1d0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

[ 2976.088280][T15455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2976.125606][T18994] wlan1: authenticate with 08:02:11:00:00:00
23:56:18 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1d0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

[ 2976.133042][T18994] wlan1: No basic rates, using min rate instead
[ 2976.144143][T18994] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2976.168606][ T9786] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 0 (expected 2)
23:56:18 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1d0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

[ 2976.180503][T15459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:18 executing program 4:
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0)

23:56:18 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="a2fc16f22b02a9564ec5225b23e2b2de2a2dfb5150e0b28ad53dd463da47f2798dd6393610bbdcebcb1c7cf208c73ec78c5a102de1342b70caefe329576a36ba179eaa3ed0ad1387452c2d46cd29ca6d1df2ce3e46e783770ecebadc075aef9145bb96b7b0b29ba8e19cd4ac35fadde131d905b7d9b9c1b6a13a9391dc3722a7eac0de6125ddf1ee4ad648dcfed669ed3735f06cd3fa59791ae95cc134441be7f60c5e2129cb5900f333bcbc16d4de3fec6a9487fb277a7e1c2ef863ed70cf05b06f3f7554b17bcd193505d2b3333fa6a716a3bbd03a71da94bdc1f3dd77b8b076b41327060ce3841df5c3e794e242c03456d1c30dba00037749d61699f39a8ed60a4e6b5dd6066043d295922dce45b4d1c21cbbf7065bc27f5f101e09bf840df024a917e8dddf1d931f5809a52c485fd288fdb1e6439ff5797acb8ccd5414ebf0058ac8626d50caf7b914f8f7a8e2efdf3c998b121f3c904c77104b4410cfc03650fe1622f3a326d4c1958068dcd8792697b3d2bf76cd97cce30ce0e148954a66ca42d63d478b73691697fadabe6068cd0edc23129748102b9b2c1d7a1ad3aa6fe8fb3a00431f8649f9dfabab40773b76b4d039558cf41aadb26b299d31ca1baaa3db7da93a0bd5225d6aa47ac1f3aa", 0x1d0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:18 executing program 4:
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0)

23:56:18 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1d0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

[ 2976.271676][ T9790] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
23:56:18 executing program 4:
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0)

23:56:18 executing program 4:
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0)

23:56:18 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1d0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:18 executing program 4:
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0)

23:56:18 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1d0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

[ 2976.391522][ T8410] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
23:56:18 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:18 executing program 4:
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0)

23:56:18 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1d0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:18 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

[ 2976.501642][ T9790] wlan1: authentication with 08:02:11:00:00:00 timed out
23:56:18 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)

23:56:18 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, 0x0, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

[ 2976.571141][T15490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2976.602371][T18994] wlan1: authenticate with 08:02:11:00:00:00
[ 2976.608483][T18994] wlan1: No basic rates, using min rate instead
23:56:18 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)

23:56:18 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, 0x0, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:18 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)

[ 2976.626495][T18994] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2976.640535][T15490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2976.660485][ T9790] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 0 (expected 2)
23:56:18 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, 0x0, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:18 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)

23:56:18 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:18 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)

23:56:18 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:18 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)

23:56:18 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:18 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)

23:56:18 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:18 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:18 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)

23:56:18 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)

23:56:18 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:18 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:18 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0x0, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0)

23:56:18 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

[ 2977.051721][T15528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:19 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0x0, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0)

23:56:19 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

[ 2977.123368][T15528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2977.130890][ T2749] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 0 (expected 2)
23:56:19 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0x0, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0)

23:56:19 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:19 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0)

23:56:19 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:19 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0)

23:56:19 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:19 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0)

23:56:19 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="a2fc16f22b02a9564ec5225b23e2b2de2a2dfb5150e0b28ad53dd463da47f2798dd6393610bbdcebcb1c7cf208c73ec78c5a102de1342b70caefe329576a36ba179eaa3ed0ad1387452c2d46cd29ca6d1df2ce3e46e783770ecebadc075aef9145bb96b7b0b29ba8e19cd4ac35fadde131d905b7d9b9c1b6a13a9391dc3722a7eac0de6125ddf1ee4ad648dcfed669ed3735f06cd3fa59791ae95cc134441be7f60c5e2129cb5900f333bcbc16d4de3fec6a9487fb277a7e1c2ef863ed70cf05b06f3f7554b17bcd193505d2b3333fa6a716a3bbd03a71da94bdc1f3dd77b8b076b41327060ce384", 0xe8}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:19 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0)

23:56:19 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="a2fc16f22b02a9564ec5225b23e2b2de2a2dfb5150e0b28ad53dd463da47f2798dd6393610bbdcebcb1c7cf208c73ec78c5a102de1342b70caefe329576a36ba179eaa3ed0ad1387452c2d46cd29ca6d1df2ce3e46e783770ecebadc075aef9145bb96b7b0b29ba8e19cd4ac35fadde131d905b7d9b9c1b6a13a9391dc3722a7eac0de6125ddf1ee4ad648dcfed669ed3735f06cd3fa59791ae95cc134441be7f60c5e2129cb5900f333bcbc16d4de3fec6a9487fb277a7e1c2ef863ed70cf05b06f3f7554b17bcd193505d2b3333fa6a716a3bbd03a71da94bdc1f3dd77b8b076b41327060ce384", 0xe8}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:19 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0)

23:56:19 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="a2fc16f22b02a9564ec5225b23e2b2de2a2dfb5150e0b28ad53dd463da47f2798dd6393610bbdcebcb1c7cf208c73ec78c5a102de1342b70caefe329576a36ba179eaa3ed0ad1387452c2d46cd29ca6d1df2ce3e46e783770ecebadc075aef9145bb96b7b0b29ba8e19cd4ac35fadde131d905b7d9b9c1b6a13a9391dc3722a7eac0de6125ddf1ee4ad648dcfed669ed3735f06cd3fa59791ae95cc134441be7f60c5e2129cb5900f333bcbc16d4de3fec6a9487fb277a7e1c2ef863ed70cf05b06f3f7554b17bcd193505d2b3333fa6a716a3bbd03a71da94bdc1f3dd77b8b076b41327060ce384", 0xe8}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:19 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0)

23:56:19 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:19 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newsa={0xf0, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0)

23:56:19 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="a2fc16f22b02a9564ec5225b23e2b2de2a2dfb5150e0b28ad53dd463da47f2798dd6393610bbdcebcb1c7cf208c73ec78c5a102de1342b70caefe329576a36ba179eaa3ed0ad1387452c2d46cd29ca6d1df2ce3e46e783770ecebadc075aef9145bb96b7b0b29ba8e19cd4ac35fadde131d905b7d9b9c1b6a13a9391dc3722a7eac0de6125ddf1ee4ad648dcfed669ed3735f06cd3fa59791ae95cc134441be7f60c5e2129cb5900f333bcbc16d4de3fec6a9487fb277a7e1c2ef863ed70cf05b06f3f7554b17bcd193505d2b3333fa6a716a3bbd03a71da94bdc1f3dd77b8b076b41327060ce3841df5c3e794e242c03456d1c30dba00037749d61699f39a8ed60a4e6b5dd6066043d295922dce45b4d1c21cbbf7065bc27f5f101e09bf840df024a917e8dddf1d931f5809a52c485fd288fdb1e6439ff5797acb8ccd5414ebf0058ac8626d50caf7b914f8f7a8e2efdf3c998b121f3c904c77104b", 0x15c}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:19 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x15c}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

[ 2977.541088][T15566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:19 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newsa={0xf0, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0)

23:56:19 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="a2fc16f22b02a9564ec5225b23e2b2de2a2dfb5150e0b28ad53dd463da47f2798dd6393610bbdcebcb1c7cf208c73ec78c5a102de1342b70caefe329576a36ba179eaa3ed0ad1387452c2d46cd29ca6d1df2ce3e46e783770ecebadc075aef9145bb96b7b0b29ba8e19cd4ac35fadde131d905b7d9b9c1b6a13a9391dc3722a7eac0de6125ddf1ee4ad648dcfed669ed3735f06cd3fa59791ae95cc134441be7f60c5e2129cb5900f333bcbc16d4de3fec6a9487fb277a7e1c2ef863ed70cf05b06f3f7554b17bcd193505d2b3333fa6a716a3bbd03a71da94bdc1f3dd77b8b076b41327060ce3841df5c3e794e242c03456d1c30dba00037749d61699f39a8ed60a4e6b5dd6066043d295922dce45b4d1c21cbbf7065bc27f5f101e09bf840df024a917e8dddf1d931f5809a52c485fd288fdb1e6439ff5797acb8ccd5414ebf0058ac8626d50caf7b914f8f7a8e2efdf3c998b121f3c904c77104b", 0x15c}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

[ 2977.615662][ T9790] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 0 (expected 2)
[ 2977.627615][T15572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:19 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newsa={0xf0, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0)

23:56:19 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="a2fc16f22b02a9564ec5225b23e2b2de2a2dfb5150e0b28ad53dd463da47f2798dd6393610bbdcebcb1c7cf208c73ec78c5a102de1342b70caefe329576a36ba179eaa3ed0ad1387452c2d46cd29ca6d1df2ce3e46e783770ecebadc075aef9145bb96b7b0b29ba8e19cd4ac35fadde131d905b7d9b9c1b6a13a9391dc3722a7eac0de6125ddf1ee4ad648dcfed669ed3735f06cd3fa59791ae95cc134441be7f60c5e2129cb5900f333bcbc16d4de3fec6a9487fb277a7e1c2ef863ed70cf05b06f3f7554b17bcd193505d2b3333fa6a716a3bbd03a71da94bdc1f3dd77b8b076b41327060ce3841df5c3e794e242c03456d1c30dba00037749d61699f39a8ed60a4e6b5dd6066043d295922dce45b4d1c21cbbf7065bc27f5f101e09bf840df024a917e8dddf1d931f5809a52c485fd288fdb1e6439ff5797acb8ccd5414ebf0058ac8626d50caf7b914f8f7a8e2efdf3c998b121f3c904c77104b4410cfc03650fe1622f3a326d4c1958068dcd8792697b3d2bf76cd97cce30ce0e148954a66ca42d63d478b73691697fadabe6068cd0edc231297", 0x196}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:19 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:19 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, {{0x8, 0x1, r0}, {0x8}}}}}]}, 0x40}}, 0x0)

[ 2977.763547][ T2749] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
23:56:19 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x196}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:19 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000100)={@val, @void, @eth={@link_local, @local, @void, {@generic={0x8864}}}}, 0x12)

23:56:19 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x196}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:19 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1b3}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

[ 2977.871653][ T2749] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
23:56:19 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1b3}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:19 executing program 4:
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$can_j1939(0x1d, 0x2, 0x7)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x4, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

23:56:19 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:19 executing program 4:
r0 = epoll_create1(0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x303}, 'vL\x00', "00000000363a0825a4856600", "9ef6007f"}, 0x38)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x30000005})
epoll_pwait(r0, &(0x7f0000002b40)=[{}], 0x1, 0x0, 0x0, 0x0)

23:56:19 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1b3}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

[ 2978.000989][ T9789] wlan1: authentication with 08:02:11:00:00:00 timed out
[ 2978.045515][T15599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:19 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="a2fc16f22b02a9564ec5225b23e2b2de2a2dfb5150e0b28ad53dd463da47f2798dd6393610bbdcebcb1c7cf208c73ec78c5a102de1342b70caefe329576a36ba179eaa3ed0ad1387452c2d46cd29ca6d1df2ce3e46e783770ecebadc075aef9145bb96b7b0b29ba8e19cd4ac35fadde131d905b7d9b9c1b6a13a9391dc3722a7eac0de6125ddf1ee4ad648dcfed669ed3735f06cd3fa59791ae95cc134441be7f60c5e2129cb5900f333bcbc16d4de3fec6a9487fb277a7e1c2ef863ed70cf05b06f3f7554b17bcd193505d2b3333fa6a716a3bbd03a71da94bdc1f3dd77b8b076b41327060ce3841df5c3e794e242c03456d1c30dba00037749d61699f39a8ed60a4e6b5dd6066043d295922dce45b4d1c21cbbf7065bc27f5f101e09bf840df024a917e8dddf1d931f5809a52c485fd288fdb1e6439ff5797acb8ccd5414ebf0058ac8626d50caf7b914f8f7a8e2efdf3c998b121f3c904c77104b4410cfc03650fe1622f3a326d4c1958068dcd8792697b3d2bf76cd97cce30ce0e148954a66ca42d63d478b73691697fadabe6068cd0edc23129748102b9b2c1d7a1ad3aa6fe8fb3a00431f8649f9dfabab40773b76b4d039558cf41aadb26b299d31ca1baaa3", 0x1c2}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

[ 2978.088548][T20126] wlan1: authenticate with 08:02:11:00:00:00
[ 2978.100744][T20126] wlan1: No basic rates, using min rate instead
[ 2978.123093][T20126] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
23:56:20 executing program 4:
unshare(0x400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x15}}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

23:56:20 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="a2fc16f22b02a9564ec5225b23e2b2de2a2dfb5150e0b28ad53dd463da47f2798dd6393610bbdcebcb1c7cf208c73ec78c5a102de1342b70caefe329576a36ba179eaa3ed0ad1387452c2d46cd29ca6d1df2ce3e46e783770ecebadc075aef9145bb96b7b0b29ba8e19cd4ac35fadde131d905b7d9b9c1b6a13a9391dc3722a7eac0de6125ddf1ee4ad648dcfed669ed3735f06cd3fa59791ae95cc134441be7f60c5e2129cb5900f333bcbc16d4de3fec6a9487fb277a7e1c2ef863ed70cf05b06f3f7554b17bcd193505d2b3333fa6a716a3bbd03a71da94bdc1f3dd77b8b076b41327060ce3841df5c3e794e242c03456d1c30dba00037749d61699f39a8ed60a4e6b5dd6066043d295922dce45b4d1c21cbbf7065bc27f5f101e09bf840df024a917e8dddf1d931f5809a52c485fd288fdb1e6439ff5797acb8ccd5414ebf0058ac8626d50caf7b914f8f7a8e2efdf3c998b121f3c904c77104b4410cfc03650fe1622f3a326d4c1958068dcd8792697b3d2bf76cd97cce30ce0e148954a66ca42d63d478b73691697fadabe6068cd0edc23129748102b9b2c1d7a1ad3aa6fe8fb3a00431f8649f9dfabab40773b76b4d039558cf41aadb26b299d31ca1baaa3", 0x1c2}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

[ 2978.123226][T15606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2978.137662][ T9789] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 0 (expected 2)
23:56:20 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80), 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:20 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5}]}}}]}, 0x3c}}, 0x0)

23:56:20 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="a2fc16f22b02a9564ec5225b23e2b2de2a2dfb5150e0b28ad53dd463da47f2798dd6393610bbdcebcb1c7cf208c73ec78c5a102de1342b70caefe329576a36ba179eaa3ed0ad1387452c2d46cd29ca6d1df2ce3e46e783770ecebadc075aef9145bb96b7b0b29ba8e19cd4ac35fadde131d905b7d9b9c1b6a13a9391dc3722a7eac0de6125ddf1ee4ad648dcfed669ed3735f06cd3fa59791ae95cc134441be7f60c5e2129cb5900f333bcbc16d4de3fec6a9487fb277a7e1c2ef863ed70cf05b06f3f7554b17bcd193505d2b3333fa6a716a3bbd03a71da94bdc1f3dd77b8b076b41327060ce3841df5c3e794e242c03456d1c30dba00037749d61699f39a8ed60a4e6b5dd6066043d295922dce45b4d1c21cbbf7065bc27f5f101e09bf840df024a917e8dddf1d931f5809a52c485fd288fdb1e6439ff5797acb8ccd5414ebf0058ac8626d50caf7b914f8f7a8e2efdf3c998b121f3c904c77104b4410cfc03650fe1622f3a326d4c1958068dcd8792697b3d2bf76cd97cce30ce0e148954a66ca42d63d478b73691697fadabe6068cd0edc23129748102b9b2c1d7a1ad3aa6fe8fb3a00431f8649f9dfabab40773b76b4d039558cf41aadb26b299d31ca1baaa3", 0x1c2}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:20 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000140)="ec8b45e82802e8ee0a5c8bb3293d", 0xe}, {&(0x7f00000004c0)="6289", 0x2}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:20 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="a2fc16f22b02a9564ec5225b23e2b2de2a2dfb5150e0b28ad53dd463da47f2798dd6393610bbdcebcb1c7cf208c73ec78c5a102de1342b70caefe329576a36ba179eaa3ed0ad1387452c2d46cd29ca6d1df2ce3e46e783770ecebadc075aef9145bb96b7b0b29ba8e19cd4ac35fadde131d905b7d9b9c1b6a13a9391dc3722a7eac0de6125ddf1ee4ad648dcfed669ed3735f06cd3fa59791ae95cc134441be7f60c5e2129cb5900f333bcbc16d4de3fec6a9487fb277a7e1c2ef863ed70cf05b06f3f7554b17bcd193505d2b3333fa6a716a3bbd03a71da94bdc1f3dd77b8b076b41327060ce3841df5c3e794e242c03456d1c30dba00037749d61699f39a8ed60a4e6b5dd6066043d295922dce45b4d1c21cbbf7065bc27f5f101e09bf840df024a917e8dddf1d931f5809a52c485fd288fdb1e6439ff5797acb8ccd5414ebf0058ac8626d50caf7b914f8f7a8e2efdf3c998b121f3c904c77104b4410cfc03650fe1622f3a326d4c1958068dcd8792697b3d2bf76cd97cce30ce0e148954a66ca42d63d478b73691697fadabe6068cd0edc23129748102b9b2c1d7a1ad3aa6fe8fb3a00431f8649f9dfabab40773b76b4d039558cf41aadb26b299d31ca1baaa3db7da93a0bd522", 0x1c9}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:20 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000380)={0x2c, r1, 0x102d3a857f636615, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x7}]}]}]}, 0x2c}}, 0x0)

23:56:20 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1c9}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:20 executing program 4:
unshare(0x400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x144000, 0x7fe2, 0x1}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4)
bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20)

23:56:20 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="a2fc16f22b02a9564ec5225b23e2b2de2a2dfb5150e0b28ad53dd463da47f2798dd6393610bbdcebcb1c7cf208c73ec78c5a102de1342b70caefe329576a36ba179eaa3ed0ad1387452c2d46cd29ca6d1df2ce3e46e783770ecebadc075aef9145bb96b7b0b29ba8e19cd4ac35fadde131d905b7d9b9c1b6a13a9391dc3722a7eac0de6125ddf1ee4ad648dcfed669ed3735f06cd3fa59791ae95cc134441be7f60c5e2129cb5900f333bcbc16d4de3fec6a9487fb277a7e1c2ef863ed70cf05b06f3f7554b17bcd193505d2b3333fa6a716a3bbd03a71da94bdc1f3dd77b8b076b41327060ce3841df5c3e794e242c03456d1c30dba00037749d61699f39a8ed60a4e6b5dd6066043d295922dce45b4d1c21cbbf7065bc27f5f101e09bf840df024a917e8dddf1d931f5809a52c485fd288fdb1e6439ff5797acb8ccd5414ebf0058ac8626d50caf7b914f8f7a8e2efdf3c998b121f3c904c77104b4410cfc03650fe1622f3a326d4c1958068dcd8792697b3d2bf76cd97cce30ce0e148954a66ca42d63d478b73691697fadabe6068cd0edc23129748102b9b2c1d7a1ad3aa6fe8fb3a00431f8649f9dfabab40773b76b4d039558cf41aadb26b299d31ca1baaa3db7da93a0bd522", 0x1c9}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:20 executing program 4:
unshare(0x400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20)

23:56:20 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1cd}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:20 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:20 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1cd}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:20 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}, @IFLA_MTU={0x8, 0x4, 0x200044}]}, 0x44}, 0x9}, 0x0)

23:56:20 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1cd}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

[ 2978.547840][T15637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:20 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0)

23:56:20 executing program 4:
unshare(0x400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x144000, 0x7fe2, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f0000000180), 0x0}, 0x20)

23:56:20 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmmsg(0xffffffffffffffff, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

[ 2978.620299][T15637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2978.629867][ T2749] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 0 (expected 2)
23:56:20 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="a2fc16f22b02a9564ec5225b23e2b2de2a2dfb5150e0b28ad53dd463da47f2798dd6393610bbdcebcb1c7cf208c73ec78c5a102de1342b70caefe329576a36ba179eaa3ed0ad1387452c2d46cd29ca6d1df2ce3e46e783770ecebadc075aef9145bb96b7b0b29ba8e19cd4ac35fadde131d905b7d9b9c1b6a13a9391dc3722a7eac0de6125ddf1ee4ad648dcfed669ed3735f06cd3fa59791ae95cc134441be7f60c5e2129cb5900f333bcbc16d4de3fec6a9487fb277a7e1c2ef863ed70cf05b06f3f7554b17bcd193505d2b3333fa6a716a3bbd03a71da94bdc1f3dd77b8b076b41327060ce3841df5c3e794e242c03456d1c30dba00037749d61699f39a8ed60a4e6b5dd6066043d295922dce45b4d1c21cbbf7065bc27f5f101e09bf840df024a917e8dddf1d931f5809a52c485fd288fdb1e6439ff5797acb8ccd5414ebf0058ac8626d50caf7b914f8f7a8e2efdf3c998b121f3c904c77104b4410cfc03650fe1622f3a326d4c1958068dcd8792697b3d2bf76cd97cce30ce0e148954a66ca42d63d478b73691697fadabe6068cd0edc23129748102b9b2c1d7a1ad3aa6fe8fb3a00431f8649f9dfabab40773b76b4d039558cf41aadb26b299d31ca1baaa3db7da93a0bd5225d6aa47ac1f3", 0x1cf}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:20 executing program 4:
unshare(0x400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x144000, 0x7fe2, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f0000000180), 0x0}, 0x20)

23:56:20 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="a2fc16f22b02a9564ec5225b23e2b2de2a2dfb5150e0b28ad53dd463da47f2798dd6393610bbdcebcb1c7cf208c73ec78c5a102de1342b70caefe329576a36ba179eaa3ed0ad1387452c2d46cd29ca6d1df2ce3e46e783770ecebadc075aef9145bb96b7b0b29ba8e19cd4ac35fadde131d905b7d9b9c1b6a13a9391dc3722a7eac0de6125ddf1ee4ad648dcfed669ed3735f06cd3fa59791ae95cc134441be7f60c5e2129cb5900f333bcbc16d4de3fec6a9487fb277a7e1c2ef863ed70cf05b06f3f7554b17bcd193505d2b3333fa6a716a3bbd03a71da94bdc1f3dd77b8b076b41327060ce3841df5c3e794e242c03456d1c30dba00037749d61699f39a8ed60a4e6b5dd6066043d295922dce45b4d1c21cbbf7065bc27f5f101e09bf840df024a917e8dddf1d931f5809a52c485fd288fdb1e6439ff5797acb8ccd5414ebf0058ac8626d50caf7b914f8f7a8e2efdf3c998b121f3c904c77104b4410cfc03650fe1622f3a326d4c1958068dcd8792697b3d2bf76cd97cce30ce0e148954a66ca42d63d478b73691697fadabe6068cd0edc23129748102b9b2c1d7a1ad3aa6fe8fb3a00431f8649f9dfabab40773b76b4d039558cf41aadb26b299d31ca1baaa3db7da93a0bd5225d6aa47ac1f3", 0x1cf}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:20 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmmsg(0xffffffffffffffff, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

[ 2978.751575][ T9790] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
23:56:20 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmmsg(0xffffffffffffffff, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:20 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1cf}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:20 executing program 4:
unshare(0x400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x144000, 0x7fe2, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f0000000180), 0x0}, 0x20)

23:56:20 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:20 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1d0}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

[ 2978.881666][ T2749] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
23:56:20 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:20 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="a2fc16f22b02a9564ec5225b23e2b2de2a2dfb5150e0b28ad53dd463da47f2798dd6393610bbdcebcb1c7cf208c73ec78c5a102de1342b70caefe329576a36ba179eaa3ed0ad1387452c2d46cd29ca6d1df2ce3e46e783770ecebadc075aef9145bb96b7b0b29ba8e19cd4ac35fadde131d905b7d9b9c1b6a13a9391dc3722a7eac0de6125ddf1ee4ad648dcfed669ed3735f06cd3fa59791ae95cc134441be7f60c5e2129cb5900f333bcbc16d4de3fec6a9487fb277a7e1c2ef863ed70cf05b06f3f7554b17bcd193505d2b3333fa6a716a3bbd03a71da94bdc1f3dd77b8b076b41327060ce3841df5c3e794e242c03456d1c30dba00037749d61699f39a8ed60a4e6b5dd6066043d295922dce45b4d1c21cbbf7065bc27f5f101e09bf840df024a917e8dddf1d931f5809a52c485fd288fdb1e6439ff5797acb8ccd5414ebf0058ac8626d50caf7b914f8f7a8e2efdf3c998b121f3c904c77104b4410cfc03650fe1622f3a326d4c1958068dcd8792697b3d2bf76cd97cce30ce0e148954a66ca42d63d478b73691697fadabe6068cd0edc23129748102b9b2c1d7a1ad3aa6fe8fb3a00431f8649f9dfabab40773b76b4d039558cf41aadb26b299d31ca1baaa3db7da93a0bd5225d6aa47ac1f3aa", 0x1d0}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:20 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:20 executing program 4:
unshare(0x400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x144000, 0x7fe2, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f0000000180), 0x0}, 0x20)

[ 2979.001623][ T2749] wlan1: authentication with 08:02:11:00:00:00 timed out
[ 2979.034766][T15669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:20 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80), 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:21 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:21 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1d0}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

[ 2979.123158][T15669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:21 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000340)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@dstopts_2292={{0x10, 0x29, 0xb}}], 0x18}, 0x0)

23:56:21 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:21 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:21 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1d0}}, 0x0)
recvmsg$kcm(r1, 0x0, 0x42)

23:56:21 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:21 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:21 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1d0}}, 0x0)
recvmsg$kcm(r1, 0x0, 0x42)

23:56:21 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:21 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:21 executing program 0:
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:21 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1d0}}, 0x0)
recvmsg$kcm(r1, 0x0, 0x42)

23:56:21 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:21 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:21 executing program 0:
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:21 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1d0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x42)

23:56:21 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:21 executing program 0:
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:21 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="a2fc16f22b02a9564ec5225b23e2b2de2a2dfb5150e0b28ad53dd463da47f2798dd6393610bbdcebcb1c7cf208c73ec78c5a102de1342b70caefe329576a36ba179eaa3ed0ad1387452c2d46cd29ca6d1df2ce3e46e783770ecebadc075aef9145bb96b7b0b29ba8e19cd4ac35fadde131d905b7d9b9c1b6a13a9391dc3722a7eac0de6125ddf1ee4ad648dcfed669ed3735f06cd3fa59791ae95cc134441be7f60c5e2129cb5900f333bcbc16d4de3fec6a9487fb277a7e1c2ef863ed70cf05b06f3f7554b17bcd193505d2b3333fa6a716a3bbd03a71da94bdc1f3dd77b8b076b41327060ce3841df5c3e794e242c03456d1c30dba00037749d61699f39a8ed60a4e6b5dd6066043d295922dce45b4d1c21cbbf7065bc27f5f101e09bf840df024a917e8dddf1d931f5809a52c485fd288fdb1e6439ff5797acb8ccd5414ebf0058ac8626d50caf7b914f8f7a8e2efdf3c998b121f3c904c77104b4410cfc03650fe1622f3a326d4c1958068dcd8792697b3d2bf76cd97cce30ce0e148954a66ca42d63d478b73691697fadabe6068cd0edc23129748102b9b2c1d7a1ad3aa6fe8fb3a00431f8649f9dfabab40773b76b4d039558cf41aadb26b299d31ca1baaa3db7da93a0bd5225d6aa47ac1f3aa", 0x1d0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x42)

[ 2979.535974][T15708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:21 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:21 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:21 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1d0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x42)

[ 2979.602220][T15708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:21 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1d0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}], 0x1}, 0x42)

23:56:21 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:21 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1d0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}], 0x1}, 0x42)

23:56:21 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:21 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="a2fc16f22b02a9564ec5225b23e2b2de2a2dfb5150e0b28ad53dd463da47f2798dd6393610bbdcebcb1c7cf208c73ec78c5a102de1342b70caefe329576a36ba179eaa3ed0ad1387452c2d46cd29ca6d1df2ce3e46e783770ecebadc075aef9145bb96b7b0b29ba8e19cd4ac35fadde131d905b7d9b9c1b6a13a9391dc3722a7eac0de6125ddf1ee4ad648dcfed669ed3735f06cd3fa59791ae95cc134441be7f60c5e2129cb5900f333bcbc16d4de3fec6a9487fb277a7e1c2ef863ed70cf05b06f3f7554b17bcd193505d2b3333fa6a716a3bbd03a71da94bdc1f3dd77b8b076b41327060ce3841df5c3e794e242c03456d1c30dba00037749d61699f39a8ed60a4e6b5dd6066043d295922dce45b4d1c21cbbf7065bc27f5f101e09bf840df024a917e8dddf1d931f5809a52c485fd288fdb1e6439ff5797acb8ccd5414ebf0058ac8626d50caf7b914f8f7a8e2efdf3c998b121f3c904c77104b4410cfc03650fe1622f3a326d4c1958068dcd8792697b3d2bf76cd97cce30ce0e148954a66ca42d63d478b73691697fadabe6068cd0edc23129748102b9b2c1d7a1ad3aa6fe8fb3a00431f8649f9dfabab40773b76b4d039558cf41aadb26b299d31ca1baaa3db7da93a0bd5225d6aa47ac1f3aa", 0x1d0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}], 0x1}, 0x42)

23:56:21 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:21 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1d0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {0x0}], 0x2}, 0x42)

23:56:21 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:21 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80), 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:21 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1d0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {0x0}], 0x2}, 0x42)

23:56:21 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:21 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:21 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="a2fc16f22b02a9564ec5225b23e2b2de2a2dfb5150e0b28ad53dd463da47f2798dd6393610bbdcebcb1c7cf208c73ec78c5a102de1342b70caefe329576a36ba179eaa3ed0ad1387452c2d46cd29ca6d1df2ce3e46e783770ecebadc075aef9145bb96b7b0b29ba8e19cd4ac35fadde131d905b7d9b9c1b6a13a9391dc3722a7eac0de6125ddf1ee4ad648dcfed669ed3735f06cd3fa59791ae95cc134441be7f60c5e2129cb5900f333bcbc16d4de3fec6a9487fb277a7e1c2ef863ed70cf05b06f3f7554b17bcd193505d2b3333fa6a716a3bbd03a71da94bdc1f3dd77b8b076b41327060ce3841df5c3e794e242c03456d1c30dba00037749d61699f39a8ed60a4e6b5dd6066043d295922dce45b4d1c21cbbf7065bc27f5f101e09bf840df024a917e8dddf1d931f5809a52c485fd288fdb1e6439ff5797acb8ccd5414ebf0058ac8626d50caf7b914f8f7a8e2efdf3c998b121f3c904c77104b4410cfc03650fe1622f3a326d4c1958068dcd8792697b3d2bf76cd97cce30ce0e148954a66ca42d63d478b73691697fadabe6068cd0edc23129748102b9b2c1d7a1ad3aa6fe8fb3a00431f8649f9dfabab40773b76b4d039558cf41aadb26b299d31ca1baaa3db7da93a0bd5225d6aa47ac1f3aa", 0x1d0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {0x0}], 0x2}, 0x42)

23:56:21 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:21 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="a2fc16f22b02a9564ec5225b23e2b2de2a2dfb5150e0b28ad53dd463da47f2798dd6393610bbdcebcb1c7cf208c73ec78c5a102de1342b70caefe329576a36ba179eaa3ed0ad1387452c2d46cd29ca6d1df2ce3e46e783770ecebadc075aef9145bb96b7b0b29ba8e19cd4ac35fadde131d905b7d9b9c1b6a13a9391dc3722a7eac0de6125ddf1ee4ad648dcfed669ed3735f06cd3fa59791ae95cc134441be7f60c5e2129cb5900f333bcbc16d4de3fec6a9487fb277a7e1c2ef863ed70cf05b06f3f7554b17bcd193505d2b3333fa6a716a3bbd03a71da94bdc1f3dd77b8b076b41327060ce3841df5c3e794e242c03456d1c30dba00037749d61699f39a8ed60a4e6b5dd6066043d295922dce45b4d1c21cbbf7065bc27f5f101e09bf840df024a917e8dddf1d931f5809a52c485fd288fdb1e6439ff5797acb8ccd5414ebf0058ac8626d50caf7b914f8f7a8e2efdf3c998b121f3c904c77104b4410cfc03650fe1622f3a326d4c1958068dcd8792697b3d2bf76cd97cce30ce0e148954a66ca42d63d478b73691697fadabe6068cd0edc23129748102b9b2c1d7a1ad3aa6fe8fb3a00431f8649f9dfabab40773b76b4d039558cf41aadb26b299d31ca1baaa3db7da93a0bd5225d6aa47ac1f3aa", 0x1d0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000003640)=""/4096, 0x1000}], 0x1}, 0x42)

[ 2980.042080][T15744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:21 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:22 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1d0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000003640)=""/4096, 0x1000}], 0x1}, 0x42)

[ 2980.111062][T15744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:22 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:22 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1d0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000003640)=""/4096, 0x1000}], 0x1}, 0x42)

23:56:22 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="a2fc16f22b02a9564ec5225b23e2b2de2a2dfb5150e0b28ad53dd463da47f2798dd6393610bbdcebcb1c7cf208c73ec78c5a102de1342b70caefe329576a36ba179eaa3ed0ad1387452c2d46cd29ca6d1df2ce3e46e783770ecebadc075aef9145bb96b7b0b29ba8e19cd4ac35fadde131d905b7d9b9c1b6a13a9391dc3722a7eac0de6125ddf1ee4ad648dcfed669ed3735f06cd3fa59791ae95cc134441be7f60c5e2129cb5900f333bcbc16d4de3fec6a9487fb277a7e1c2ef863ed70cf05b06f3f7554b17bcd193505d2b3333fa6a716a3bbd03a71da94bdc1f3dd77b8b076b41327060ce3841df5c3e794e242c03456d1c30dba00037749d61699f39a8ed60a4e6b5dd6066043d295922dce45b4d1c21cbbf7065bc27f5f101e09bf840df024a917e8dddf1d931f5809a52c485fd288fdb1e6439ff5797acb8ccd5414ebf0058ac8626d50caf7b914f8f7a8e2efdf3c998b121f3c904c77104b4410cfc03650fe1622f3a326d4c1958068dcd8792697b3d2bf76cd97cce30ce0e148954a66ca42d63d478b73691697fadabe6068cd0edc23129748102b9b2c1d7a1ad3aa6fe8fb3a00431f8649f9dfabab40773b76b4d039558cf41aadb26b299d31ca1baaa3db7da93a0bd5225d6aa47ac1f3aa", 0x1d0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{0x0}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:22 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:22 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1d0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{0x0}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:22 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:22 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1d0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{0x0}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x42)

23:56:22 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:22 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:22 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="a2fc16f22b02a9564ec5225b23e2b2de2a2dfb5150e0b28ad53dd463da47f2798dd6393610bbdcebcb1c7cf208c73ec78c5a102de1342b70caefe329576a36ba179eaa3ed0ad1387452c2d46cd29ca6d1df2ce3e46e783770ecebadc075aef9145bb96b7b0b29ba8e19cd4ac35fadde131d905b7d9b9c1b6a13a9391dc3722a7eac0de6125ddf1ee4ad648dcfed669ed3735f06cd3fa59791ae95cc134441be7f60c5e2129cb5900f333bcbc16d4de3fec6a9487fb277a7e1c2ef863ed70cf05b06f3f7554b17bcd193505d2b3333fa6a716a3bbd03a71da94bdc1f3dd77b8b076b41327060ce3841df5c3e794e242c03456d1c30dba00037749d61699f39a8ed60a4e6b5dd6066043d295922dce45b4d1c21cbbf7065bc27f5f101e09bf840df024a917e8dddf1d931f5809a52c485fd288fdb1e6439ff5797acb8ccd5414ebf0058ac8626d50caf7b914f8f7a8e2efdf3c998b121f3c904c77104b4410cfc03650fe1622f3a326d4c1958068dcd8792697b3d2bf76cd97cce30ce0e148954a66ca42d63d478b73691697fadabe6068cd0edc23129748102b9b2c1d7a1ad3aa6fe8fb3a00431f8649f9dfabab40773b76b4d039558cf41aadb26b299d31ca1baaa3db7da93a0bd5225d6aa47ac1f3aa", 0x1d0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x0)

23:56:22 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:22 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:22 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:22 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

[ 2980.496684][T15781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:22 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:22 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

[ 2980.561035][T15786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:22 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:22 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:22 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:22 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:22 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:22 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:22 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:22 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:22 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:22 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:22 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:22 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

[ 2980.942562][T15807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:22 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:22 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:22 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}], 0x1}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

[ 2981.009317][T15807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:22 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:23 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}], 0x1}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:23 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:23 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}], 0x1}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:23 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:23 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {0x0}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:23 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:23 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x1d0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x0)

23:56:23 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {0x0}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:23 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {0x0}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:23 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:23 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:23 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

[ 2981.372564][T15840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:23 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

[ 2981.437016][T15845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:23 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:23 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f464", 0x64}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:23 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f464", 0x64}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:23 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f464", 0x64}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:23 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93", 0x96}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:23 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93", 0x96}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:23 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93", 0x96}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:23 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf0", 0xaf}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:23 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf0", 0xaf}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:23 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:23 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf0", 0xaf}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:23 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26", 0xbb}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

[ 2981.804931][T15869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2981.867195][T15869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:24 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:24 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="a2fc16f22b02a9564ec5225b23e2b2de2a2dfb5150e0b28ad53dd463da47f2798dd6393610bbdcebcb1c7cf208c73ec78c5a102de1342b70caefe329576a36ba179eaa3ed0ad1387452c2d46cd29ca6d1df2ce3e46e783770ecebadc075aef9145bb96b7b0b29ba8e19cd4ac35fadde131d905b7d9b9c1b6a13a9391dc3722a7eac0de6125ddf1ee4ad648dcfed669ed3735f06cd3fa59791ae95cc134441be7f60c5e2129cb5900f333bcbc16d4de3fec6a9487fb277a7e1c2ef863ed70cf05b06f3f7554b17bcd193505d2b3333fa6a716a3bbd03a71da94bdc1f3dd77b8b076b41327060ce3841df5c3e794e242c03456d1c30dba00037749d61699f39a8ed60a4e6b5dd6066043d295922dce45b4d1c21cbbf7065bc27f5f101e09bf840df024a917e8dddf1d931f5809a52c485fd288fdb1e6439ff5797acb8ccd5414ebf0058ac8626d50caf7b914f8f7a8e2efdf3c998b121f3c904c77104b4410cfc03650fe1622f3a326d4c1958068dcd8792697b3d2bf76cd97cce30ce0e148954a66ca42d63d478b73691697fadabe6068cd0edc23129748102b9b2c1d7a1ad3aa6fe8fb3a00431f8649f9dfabab40773b76b4d039558cf41aadb26b299d31ca1baaa3db7da93a0bd5225d6aa47ac1f3aa", 0x1d0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x0)

23:56:24 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

[ 2982.210674][T15879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:24 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmmsg(0xffffffffffffffff, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:24 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmmsg(0xffffffffffffffff, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

[ 2982.273960][T15879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:24 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmmsg(0xffffffffffffffff, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:24 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:24 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:24 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:24 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:24 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:24 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:24 executing program 4:
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:24 executing program 4:
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:24 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:24 executing program 4:
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:24 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

[ 2982.632084][T15903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:24 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:24 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26", 0xbb}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

[ 2982.699586][T15908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:24 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:24 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:24 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:24 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:24 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:24 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:24 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:24 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:24 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', <r1=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r4], 0x3c}}, 0x0)

23:56:24 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:24 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:24 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

[ 2983.080065][T15930] 8021q: adding VLAN 0 to HW filter on device batadv1
[ 2983.099689][T15930] bond0: (slave batadv1): Enslaving as an active interface with an up link
23:56:25 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:25 executing program 3:
syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "770006", 0x18, 0x3a, 0xff, @rand_addr=' \x01\x00', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @loopback}}}}}}, 0x0)

[ 2983.121544][T15933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:25 executing program 3:
unshare(0x400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x144000, 0x7fe2, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000180), 0x20000000}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f0000000180), 0x0}, 0x20)

23:56:25 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

[ 2983.190444][T15933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:25 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x80000001}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)

23:56:25 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:25 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:25 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000780)={'ip6gre0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private0}})

23:56:25 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:25 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_GROUP={0xc, 0x2, [{}]}]}, 0x24}}, 0x0)

23:56:25 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:25 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x3, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

23:56:25 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:25 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:25 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x3, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

23:56:25 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:25 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x3, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

23:56:25 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26", 0xbb}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:25 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

[ 2983.587477][T15967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:25 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:25 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x3, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

[ 2983.672579][T15967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:25 executing program 3:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x3, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

23:56:25 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:25 executing program 3:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x3, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

23:56:25 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:25 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:25 executing program 3:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x3, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

23:56:25 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:25 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:25 executing program 3:
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x3, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

23:56:25 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:25 executing program 3:
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x3, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

23:56:25 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:25 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:25 executing program 3:
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x3, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

23:56:25 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)

[ 2984.069198][T16002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:26 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:26 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)

23:56:26 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

[ 2984.144987][T16008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:26 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:26 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)

23:56:26 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x0)

23:56:26 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:26 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x0)

23:56:26 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x0)

23:56:26 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

23:56:26 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

23:56:26 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

23:56:26 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:26 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344", 0xc1}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:26 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344", 0xc1}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:26 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x0, 0x0, 0x0, {0x0, 0x3, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

[ 2984.506127][T16033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:26 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x0, 0x0, 0x0, {0x0, 0x3, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

23:56:26 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344", 0xc1}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:26 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x0, 0x0, 0x0, {0x0, 0x3, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

[ 2984.589956][T16033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:26 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0xb, 0x0, 0x0, {0x0, 0x3, 0x6a00}}, 0x14}}, 0x0)

23:56:26 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954", 0xc4}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:26 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:26 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0xb, 0x0, 0x0, {0x0, 0x3, 0x6a00}}, 0x14}}, 0x0)

23:56:26 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954", 0xc4}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:26 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0xb, 0x0, 0x0, {0x0, 0x3, 0x6a00}}, 0x14}}, 0x0)

23:56:26 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954", 0xc4}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:26 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x18, 0x30, 0xb, 0x0, 0x0, {0x0, 0x3, 0x6a00}, [{0x4}]}, 0x18}}, 0x0)

23:56:26 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7ba", 0xc6}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:26 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x18, 0x30, 0xb, 0x0, 0x0, {0x0, 0x3, 0x6a00}, [{0x4}]}, 0x18}}, 0x0)

23:56:26 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:26 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7ba", 0xc6}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:26 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x18, 0x30, 0xb, 0x0, 0x0, {0x0, 0x3, 0x6a00}, [{0x4}]}, 0x18}}, 0x0)

23:56:26 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7ba", 0xc6}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:26 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x3, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

[ 2984.989362][T16069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:26 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x1}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:26 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x3, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

[ 2985.059077][T16076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:27 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x1}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:27 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x3, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

23:56:27 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:27 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x1}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:27 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0xb, 0x0, 0x0, {0x0, 0x3, 0x6a00}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0)

23:56:27 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{0x0}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:27 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0xb, 0x0, 0x0, {0x0, 0x3, 0x6a00}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0)

23:56:27 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{0x0}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:27 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0xb, 0x0, 0x0, {0x0, 0x3, 0x6a00}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0)

23:56:27 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{0x0}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:27 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local}}, 0x1a)

23:56:27 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:27 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:27 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

[ 2985.450585][T16106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:27 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:27 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e", 0x33}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:27 executing program 3:
r0 = epoll_create1(0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000))
epoll_pwait(r0, &(0x7f0000002b40)=[{}], 0x1, 0x0, 0x0, 0x0)

[ 2985.527122][T16106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:27 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:27 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f000000d440)={0x0, 0x0, &(0x7f000000d400)={0x0, 0xccb4}}, 0x0)

23:56:27 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e", 0x33}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:27 executing program 3:
unshare(0x400)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
sendfile(0xffffffffffffffff, r0, &(0x7f00000000c0)=0x9, 0x7fffffffffffffff)

23:56:27 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e", 0x33}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:27 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed", 0x4c}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:27 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08", 0x8b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:27 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed", 0x4c}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:27 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed", 0x4c}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:27 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9c", 0x59}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:27 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

[ 2985.898568][T16138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2985.960943][T16138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:27 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:28 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

[ 2986.304076][T16142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2986.369180][T16143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:28 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80), 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:28 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000000, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:28 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000340)={0xa, 0x4e24, 0x1000000080000, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x28}, 0x0)

23:56:28 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:28 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newsa={0x14c, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in=@empty}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @coaddr={0x14, 0xe, @in=@local}]}, 0x14c}}, 0x0)

23:56:28 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9c", 0x59}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:28 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x13, &(0x7f0000000300)=@ringbuf={{}, {}, {}, [@func, @cb_func, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

23:56:28 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0xf0, 0x1c, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@remote}}, 0xf0}}, 0x0)

[ 2986.756275][T16153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:28 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0xf0, 0x1c, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@remote}}, 0xf0}}, 0x0)

[ 2986.819320][T16153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2986.835003][T16159] __nla_validate_parse: 29 callbacks suppressed
[ 2986.835020][T16159] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.3'.
23:56:28 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0xf0, 0x1c, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@remote}}, 0xf0}}, 0x0)

[ 2986.890897][T16161] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.3'.
23:56:28 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0xf0, 0x1c, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@remote}}, 0xf0}}, 0x0)

23:56:28 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

[ 2986.935648][T16163] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.3'.
23:56:28 executing program 3:
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0xf0, 0x1c, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@remote}}, 0xf0}}, 0x0)

23:56:28 executing program 3:
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0xf0, 0x1c, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@remote}}, 0xf0}}, 0x0)

[ 2987.001118][T16165] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.3'.
23:56:28 executing program 3:
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0xf0, 0x1c, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@remote}}, 0xf0}}, 0x0)

23:56:29 executing program 3:
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0xf0, 0x1c, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@remote}}, 0xf0}}, 0x0)

23:56:29 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:29 executing program 3:
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0xf0, 0x1c, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@remote}}, 0xf0}}, 0x0)

23:56:29 executing program 3:
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0xf0, 0x1c, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@remote}}, 0xf0}}, 0x0)

[ 2987.181069][T16177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:29 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)

23:56:29 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)

[ 2987.245295][T16177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:29 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)

23:56:29 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)

23:56:29 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80), 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:29 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)

23:56:29 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)

23:56:29 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)

23:56:29 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)

23:56:29 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)

23:56:29 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0xf0, 0x1c, 0x0, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@remote}}, 0xf0}}, 0x0)

23:56:29 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:29 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0xf0, 0x1c, 0x0, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@remote}}, 0xf0}}, 0x0)

23:56:29 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9c", 0x59}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:29 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0xf0, 0x1c, 0x0, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@remote}}, 0xf0}}, 0x0)

[ 2987.637207][T16205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:29 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x320}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}, 0x0)

[ 2987.718140][T16212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:29 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:29 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

[ 2988.071735][T16218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2988.133856][T16218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:30 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80), 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:30 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:30 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6", 0x5f}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:30 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6", 0x5f}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:30 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6", 0x5f}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

[ 2988.515863][T16222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:30 executing program 3:
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', 0x0})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x48)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f0000000480), &(0x7f0000000580)=@tcp=r1}, 0x20)
bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000240)={r0, &(0x7f0000000180), 0x20000000}, 0x20)

23:56:30 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e", 0x62}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

[ 2988.583774][T16222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:30 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:30 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e", 0x62}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:30 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:30 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:30 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e", 0x62}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:30 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:30 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6", 0x64}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:30 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:30 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6", 0x64}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:30 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:30 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6", 0x64}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:30 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:30 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:30 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:30 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

[ 2988.970003][T16256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:30 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:30 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

[ 2989.044585][T16256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:30 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:31 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:31 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:31 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)

23:56:31 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:31 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)

23:56:31 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:31 executing program 3:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:31 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)

23:56:31 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:31 executing program 3:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:31 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:31 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00), 0x0, 0x0, 0x0)

23:56:31 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}], 0x1}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:31 executing program 3:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:31 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00), 0x0, 0x0, 0x0)

23:56:31 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}], 0x1}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

[ 2989.438549][T16293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:31 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80), 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:31 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:31 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00), 0x0, 0x0, 0x0)

23:56:31 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}], 0x1}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

[ 2989.532145][T16301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:31 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {0x0}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:31 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

23:56:31 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:31 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

23:56:31 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {0x0}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:31 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:31 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {0x0}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:31 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

23:56:31 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:31 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}], 0x1}}], 0x1, 0x0, 0x0)

23:56:31 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:31 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:31 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:31 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}], 0x1}}], 0x1, 0x0, 0x0)

23:56:31 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:31 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:31 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

[ 2989.969203][T16334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:31 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:31 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}], 0x1}}], 0x1, 0x0, 0x0)

23:56:31 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290", 0x3e}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:31 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

[ 2990.055851][T16334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:32 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {0x0}], 0x2}}], 0x1, 0x0, 0x0)

23:56:32 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290", 0x3e}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:32 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:32 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {0x0}], 0x2}}], 0x1, 0x0, 0x0)

23:56:32 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:32 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290", 0x3e}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:32 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:32 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80), 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:32 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {0x0}], 0x2}}], 0x1, 0x0, 0x0)

23:56:32 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:32 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e360", 0x5d}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:32 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params]}, 0x28}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:32 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:32 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/214, 0xd6}], 0x1}}], 0x1, 0x0, 0x0)

23:56:32 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e360", 0x5d}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

[ 2990.534938][T16368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:32 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:32 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/214, 0xd6}], 0x1}}], 0x1, 0x0, 0x0)

23:56:32 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e360", 0x5d}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

[ 2990.620796][T16368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:32 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/214, 0xd6}], 0x1}}], 0x1, 0x0, 0x0)

23:56:32 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:32 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea5", 0x6c}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:32 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:32 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:32 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea5", 0x6c}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:32 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:32 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:32 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea5", 0x6c}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:32 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:32 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fecffbd8d378c28d30274527f2bc0ead08c86826455f44bc25c87d93a509f7f4675b58b0a7ec71c3793ce2776fafa72bc4b0593cf088e2c488c68c916f15f6fb26c13b196c2344212954c7badd", 0xc7}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:32 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da", 0x74}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:32 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params]}, 0x28}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:32 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:32 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a80)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5}]}}}]}, 0x3c}}, 0x0)

23:56:32 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da", 0x74}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:32 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

[ 2991.040776][T16415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:33 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a80)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5}]}}}]}, 0x3c}}, 0x0)

23:56:33 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da", 0x74}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:33 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

[ 2991.112408][T16415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:33 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed00"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:33 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80), 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:33 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc74", 0x78}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:33 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a80)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5}]}}}]}, 0x3c}}, 0x0)

23:56:33 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed00"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:33 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc74", 0x78}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:33 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params]}, 0x28}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:33 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed00"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:33 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a80)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5}]}}}]}, 0x3c}}, 0x0)

23:56:33 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc74", 0x78}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

[ 2991.512080][T16445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:33 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed0000"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:33 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515", 0x7a}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:33 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a80)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5}]}}}]}, 0x3c}}, 0x0)

[ 2991.581472][T16445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:33 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a80)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5}]}}}]}, 0x3c}}, 0x0)

23:56:33 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed0000"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:33 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515", 0x7a}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:33 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a80)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5}]}}}]}, 0x3c}}, 0x0)

23:56:33 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a80)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5}]}}}]}, 0x3c}}, 0x0)

23:56:33 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed0000"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:33 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515", 0x7a}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:33 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a80)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5}]}}}]}, 0x3c}}, 0x0)

23:56:33 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a80)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5}]}}}]}, 0x3c}}, 0x0)

23:56:33 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x1}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:33 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:33 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)

23:56:33 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:33 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:33 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)

23:56:33 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x1}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:33 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)

23:56:33 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

[ 2991.993618][T16485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:33 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)

23:56:33 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x1}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

[ 2992.064972][T16494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:34 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)

23:56:34 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:34 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{0x0}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:34 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:34 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:34 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)

23:56:34 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{0x0}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:34 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:34 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:34 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:34 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)

23:56:34 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:34 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{0x0}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

[ 2992.499516][T16518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:34 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:34 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}], 0x1}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:34 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)

23:56:34 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

[ 2992.579921][T16526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:34 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}], 0x1}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:34 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:34 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)

23:56:34 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:34 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}], 0x1}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:34 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:34 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a80)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5}]}}}]}, 0x3c}}, 0x0)

23:56:34 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:34 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {0x0}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:34 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a80)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5}]}}}]}, 0x3c}}, 0x0)

23:56:34 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:34 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e", 0x33}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:34 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a80)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5}]}}}]}, 0x3c}}, 0x0)

23:56:34 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:34 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {0x0}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:34 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:34 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a80)=@newlink={0x20, 0x10, 0x401}, 0x20}}, 0x0)

23:56:34 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e", 0x33}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:34 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {0x0}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:34 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

[ 2993.032218][T16564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:34 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e", 0x33}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:34 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a80)=@newlink={0x20, 0x10, 0x401}, 0x20}}, 0x0)

23:56:34 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

[ 2993.120252][T16564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:35 executing program 3:
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:35 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a80)=@newlink={0x20, 0x10, 0x401}, 0x20}}, 0x0)

23:56:35 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed", 0x4c}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:35 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

[ 2993.164437][T11594] wlan1: authenticate with 08:02:11:00:00:00
[ 2993.171556][T11594] wlan1: No basic rates, using min rate instead
[ 2993.198560][T11594] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
23:56:35 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a80)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0)

23:56:35 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed", 0x4c}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:35 executing program 3:
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:35 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a80)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0)

23:56:35 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

[ 2993.321512][ T2749] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
23:56:35 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290", 0x3e}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:35 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed", 0x4c}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:35 executing program 3:
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:35 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a80)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0)

23:56:35 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(0x0, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:35 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290", 0x3e}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

[ 2993.443782][ T9786] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
23:56:35 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9c", 0x59}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:35 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

[ 2993.563747][ T9786] wlan1: authentication with 08:02:11:00:00:00 timed out
[ 2993.578322][T16607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:35 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290", 0x3e}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:35 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, 0x0, 0x0)

23:56:35 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:35 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9c", 0x59}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:35 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e360", 0x5d}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:35 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e360", 0x5d}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:35 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9c", 0x59}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:35 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, 0x0, 0x0)

23:56:35 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:35 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e360", 0x5d}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:35 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, 0x0, 0x0)

23:56:35 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6", 0x5f}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:35 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:35 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea5", 0x6c}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:35 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(0x0, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:35 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6", 0x5f}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:35 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)

23:56:35 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea5", 0x6c}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:35 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)

23:56:35 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:35 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6", 0x5f}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:35 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea5", 0x6c}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:35 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e", 0x62}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

[ 2994.052987][T16649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:36 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:36 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)

23:56:36 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da", 0x74}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:36 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e", 0x62}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:36 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:36 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da", 0x74}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:36 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)

23:56:36 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:36 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e", 0x62}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:36 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)

23:56:36 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da", 0x74}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:36 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)

23:56:36 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:36 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6", 0x64}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:36 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(0x0, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:36 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc74", 0x78}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:36 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0x0, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:36 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:36 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6", 0x64}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:36 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0x0, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:36 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc74", 0x78}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

[ 2994.519484][T16692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:36 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6", 0x64}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:36 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:36 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0x0, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:36 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc74", 0x78}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:36 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:36 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:36 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:36 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:36 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515", 0x7a}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:36 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:36 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:36 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:36 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x0)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:36 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:36 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515", 0x7a}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:36 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:36 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:36 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)

23:56:36 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:36 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:36 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515", 0x7a}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

[ 2994.968863][T16738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:36 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)

[ 2995.040455][T16738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:36 executing program 2:
bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(r0, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:36 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:37 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)

23:56:37 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x1}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:37 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

23:56:37 executing program 2:
bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(r0, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:37 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00), 0x0, 0x0, 0x0)

23:56:37 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0xf0, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0)

23:56:37 executing program 2:
bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(r0, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:37 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x1}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:37 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00), 0x0, 0x0, 0x0)

23:56:37 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0xf0, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0)

23:56:37 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:37 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x1}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:37 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x0)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:37 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0xf0, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0)

23:56:37 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00), 0x0, 0x0, 0x0)

23:56:37 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:37 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{0x0}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

[ 2995.469733][T16781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:37 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:37 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

23:56:37 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @local}}}, &(0x7f0000000140)=0x90)

23:56:37 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{0x0}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:37 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:37 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[ 2995.581962][T16793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:37 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{0x0}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:37 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

23:56:37 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:37 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:37 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}], 0x1}}], 0x1, 0x0, 0x0)

23:56:37 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:37 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:37 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:37 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}], 0x1}}], 0x1, 0x0, 0x0)

23:56:37 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:37 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}], 0x1}}], 0x1, 0x0, 0x0)

23:56:37 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x0)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:37 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e", 0x33}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:37 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:37 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {0x0}], 0x2}}], 0x1, 0x0, 0x0)

23:56:37 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e", 0x33}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:37 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

[ 2996.007411][T16829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:37 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {0x0}], 0x2}}], 0x1, 0x0, 0x0)

23:56:37 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e", 0x33}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:38 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

[ 2996.077147][T16829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:38 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {0x0}], 0x2}}], 0x1, 0x0, 0x0)

23:56:38 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed", 0x4c}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:38 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:38 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:38 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed", 0x4c}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:38 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/214, 0xd6}], 0x1}}], 0x1, 0x0, 0x0)

23:56:38 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:38 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/214, 0xd6}], 0x1}}], 0x1, 0x0, 0x0)

23:56:38 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)="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", 0x3a0}}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000003640)=""/4096, 0x1000}], 0x1}, 0x42)

23:56:38 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed", 0x4c}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:38 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/214, 0xd6}], 0x1}}], 0x1, 0x0, 0x0)

23:56:38 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:38 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:38 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:38 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9c", 0x59}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:38 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:38 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

[ 2996.510063][T16867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:38 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b3", 0x8)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:38 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9c", 0x59}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

[ 2996.584602][T16867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:38 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b3", 0x8)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:38 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:38 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9c", 0x59}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

[ 2996.645290][T16879] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
23:56:38 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

23:56:38 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b3", 0x8)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:38 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:38 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6", 0x5f}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

[ 2996.751063][T16889] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
23:56:38 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:38 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

23:56:38 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val={@val, {0x8864}}}}, 0x1a)

23:56:38 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:38 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6", 0x5f}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:38 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:38 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6", 0x5f}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:38 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

[ 2996.937695][T16899] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
23:56:38 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a", 0xe)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:38 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e", 0x62}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:38 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a", 0xe)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

[ 2997.037639][T16908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:38 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

23:56:38 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val={@val, {0x8864}}}}, 0x1a)

23:56:39 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e", 0x62}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

[ 2997.112663][T16908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:39 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a", 0xe)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

[ 2997.173896][T16921] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
23:56:39 executing program 3:
socket(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r3, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

23:56:39 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e", 0x62}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:39 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40", 0xf)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:39 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val={@val, {0x8864}}}}, 0x1a)

[ 2997.269882][T16928] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
23:56:39 executing program 3:
socket(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r3, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

23:56:39 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6", 0x64}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:39 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40", 0xf)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:39 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val={@val, {0x8864}}}}, 0x1a)

23:56:39 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6", 0x64}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:39 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40", 0xf)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

[ 2997.392671][T16936] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
23:56:39 executing program 3:
socket(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r3, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

23:56:39 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:39 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6", 0x64}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

[ 2997.534704][T16946] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2997.536201][T16949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:39 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:39 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

23:56:39 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val={@val, {0x8864}}}}, 0x1a)

23:56:39 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:39 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:39 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

[ 2997.653968][T16949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:39 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:39 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val={@val, {0x8864}}}}, 0x1a)

23:56:39 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:39 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

23:56:39 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:39 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

23:56:39 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000300)=""/214, 0x8b}], 0x2}}], 0x1, 0x0, 0x0)

23:56:39 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val={@val, {0x8864}}}}, 0x1a)

23:56:39 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

23:56:39 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)

23:56:39 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)

23:56:39 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

23:56:39 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void}, 0x2e)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:39 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val={@val, {0x8864}}}}, 0x1a)

23:56:39 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x10, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

[ 2998.035306][T16986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2998.072193][T20126] wlan1: authenticate with 08:02:11:00:00:00
23:56:39 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)

[ 2998.082764][T20126] wlan1: No basic rates, using min rate instead
[ 2998.102523][T20126] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2998.114199][T16986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:40 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00), 0x0, 0x0, 0x0)

[ 2998.136208][ T2749] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 0 (expected 2)
[ 2998.140921][T16996] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
23:56:40 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val={@val, {0x8864}}}}, 0x1a)

23:56:40 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x10, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

23:56:40 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00), 0x0, 0x0, 0x0)

23:56:40 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00), 0x0, 0x0, 0x0)

[ 2998.255275][T17002] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2998.264864][ T8410] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
23:56:40 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val={@val, {0x8864}}}}, 0x1a)

23:56:40 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x10, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

23:56:40 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

23:56:40 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r3, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

[ 2998.371783][ T9786] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[ 2998.380487][T17011] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
23:56:40 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val={@val, {0x8864}}}}, 0x1a)

23:56:40 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

23:56:40 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r3, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

23:56:40 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void}, 0x2e)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

[ 2998.481501][ T8410] wlan1: authentication with 08:02:11:00:00:00 timed out
23:56:40 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r3, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

23:56:40 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[ 2998.560732][T17025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2998.599063][T20126] wlan1: authenticate with 08:02:11:00:00:00
[ 2998.609058][T20126] wlan1: No legacy rates in association response
[ 2998.631264][T20126] 
[ 2998.633928][T20126] =============================
[ 2998.637405][T17025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2998.638781][T20126] WARNING: suspicious RCU usage
[ 2998.638792][T20126] 6.1.80-syzkaller #0 Not tainted
[ 2998.638804][T20126] -----------------------------
[ 2998.638811][T20126] net/mac80211/sta_info.c:361 suspicious rcu_dereference_protected() usage!
[ 2998.672097][T20126] 
[ 2998.672097][T20126] other info that might help us debug this:
23:56:40 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}], 0x1}}], 0x1, 0x0, 0x0)

23:56:40 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r3, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

23:56:40 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

[ 2998.672097][T20126] 
[ 2998.682404][T20126] 
[ 2998.682404][T20126] rcu_scheduler_active = 2, debug_locks = 1
[ 2998.690486][T20126] 4 locks held by kworker/0:0/20126:
[ 2998.695845][T20126]  #0: ffff888012470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[ 2998.706375][T20126]  #1: ffffc9000ca2fd20 ((work_completion)(&rdev->conn_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[ 2998.718066][T20126]  #2: ffff8880a4b607c8 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_conn_work+0xbe/0x500
[ 2998.728175][T20126]  #3: ffff888097f94d40 (&wdev->mtx){+.+.}-{3:3}, at: cfg80211_conn_work+0x13e/0x500
[ 2998.737767][T20126] 
[ 2998.737767][T20126] stack backtrace:
[ 2998.743714][T20126] CPU: 0 PID: 20126 Comm: kworker/0:0 Not tainted 6.1.80-syzkaller #0
[ 2998.751894][T20126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[ 2998.761968][T20126] Workqueue: events cfg80211_conn_work
[ 2998.767462][T20126] Call Trace:
[ 2998.770758][T20126]  <TASK>
[ 2998.773705][T20126]  dump_stack_lvl+0x1e3/0x2cb
23:56:40 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}], 0x1}}], 0x1, 0x0, 0x0)

[ 2998.778415][T20126]  ? nf_tcp_handle_invalid+0x642/0x642
[ 2998.783912][T20126]  ? panic+0x75d/0x75d
[ 2998.788014][T20126]  lockdep_rcu_suspicious+0x21c/0x330
[ 2998.793417][T20126]  sta_remove_link+0x353/0x4a0
[ 2998.798270][T20126]  ? __sta_info_alloc+0x17a0/0x1e90
[ 2998.803491][T20126]  sta_info_free+0x4f/0x750
[ 2998.808016][T20126]  ieee80211_prep_connection+0xda4/0x1150
[ 2998.813815][T20126]  ? ieee80211_prep_connection+0x51d/0x1150
[ 2998.819738][T20126]  ieee80211_mgd_auth+0xbaf/0x1150
[ 2998.824874][T20126]  ? __local_bh_enable_ip+0x164/0x1f0
23:56:40 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r3, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

23:56:40 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}], 0x1}}], 0x1, 0x0, 0x0)

[ 2998.830295][T20126]  ? ieee80211_mlme_notify_scan_completed+0x400/0x400
[ 2998.837072][T20126]  ? rcu_is_watching+0x11/0xb0
[ 2998.841861][T20126]  cfg80211_mlme_auth+0x587/0x9b0
[ 2998.847002][T20126]  cfg80211_conn_do_work+0x47c/0xdd0
[ 2998.852314][T20126]  ? cfg80211_conn_work+0x500/0x500
[ 2998.857545][T20126]  ? __lock_acquire+0x125b/0x1f80
[ 2998.862661][T20126]  ? mutex_lock_nested+0x10/0x10
[ 2998.867622][T20126]  ? __lock_acquire+0x125b/0x1f80
[ 2998.872670][T20126]  ? mark_lock+0x9a/0x340
[ 2998.877025][T20126]  ? cfg80211_conn_work+0x255/0x500
[ 2998.882249][T20126]  cfg80211_conn_work+0x2a1/0x500
[ 2998.887303][T20126]  ? trace_rdev_return_int+0x270/0x270
[ 2998.892796][T20126]  ? mark_lock+0x9a/0x340
[ 2998.897155][T20126]  ? __lock_acquire+0x125b/0x1f80
[ 2998.902234][T20126]  ? read_lock_is_recursive+0x10/0x10
[ 2998.907631][T20126]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 2998.913642][T20126]  ? print_irqtrace_events+0x210/0x210
[ 2998.919117][T20126]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 2998.925032][T20126]  ? do_raw_spin_unlock+0x137/0x8a0
23:56:40 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r3, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

23:56:40 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {0x0}], 0x2}}], 0x1, 0x0, 0x0)

[ 2998.930258][T20126]  ? process_one_work+0x7a9/0x11d0
[ 2998.935386][T20126]  process_one_work+0x8a9/0x11d0
[ 2998.940374][T20126]  ? worker_detach_from_pool+0x260/0x260
[ 2998.946037][T20126]  ? _raw_spin_lock_irqsave+0x120/0x120
[ 2998.951685][T20126]  ? kthread_data+0x4e/0xc0
[ 2998.956216][T20126]  ? wq_worker_running+0x97/0x190
[ 2998.961416][T20126]  worker_thread+0xa47/0x1200
[ 2998.966126][T20126]  ? _raw_spin_unlock+0x40/0x40
[ 2998.971007][T20126]  kthread+0x28d/0x320
[ 2998.975099][T20126]  ? worker_clr_flags+0x190/0x190
23:56:40 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void}, 0x2e)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:40 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r3, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

23:56:40 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val={@val, {0x8864}}}}, 0x1a)

[ 2998.980138][T20126]  ? kthread_blkcg+0xd0/0xd0
[ 2998.984748][T20126]  ret_from_fork+0x1f/0x30
[ 2998.989233][T20126]  </TASK>
23:56:40 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {0x0}], 0x2}}], 0x1, 0x0, 0x0)

23:56:40 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r3, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

23:56:41 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r3, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

[ 2999.099592][T17053] wlan1: authenticate with 08:02:11:00:00:00
[ 2999.118273][T17053] wlan1: No legacy rates in association response
[ 2999.139360][T17053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:41 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/85, 0x55}, {0x0}], 0x2}}], 0x1, 0x0, 0x0)

23:56:41 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r3, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

[ 2999.221441][T17053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:41 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val={@val, {0x8864}}}}, 0x1a)

23:56:41 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/214, 0xd6}], 0x1}}], 0x1, 0x0, 0x0)

23:56:41 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/214, 0xd6}], 0x1}}], 0x1, 0x0, 0x0)

23:56:41 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r3, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

23:56:41 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r3, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

23:56:41 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/214, 0xd6}], 0x1}}], 0x1, 0x0, 0x0)

23:56:41 executing program 0:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val={@val, {0x8864}}}}, 0x1a)

23:56:41 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:41 executing program 3:
r0 = socket(0x0, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

23:56:41 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:41 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:41 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eeae7973c083fa0b8e3", 0x8d}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

[ 2999.651157][T17092] wlan1: authenticate with 08:02:11:00:00:00
[ 2999.673356][T17092] wlan1: No legacy rates in association response
23:56:41 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000021c0)="d9f99d57eeb22bbadaa80f6518f8f4e8be1c0a24691fe28e8e7625e84e6f4d0c91e5e372d71ecdddf99fc05aabe55f4651216e7062267a95ca2e2dfc2db5e2a3687ae476c4bce9b70b441aed41ced1bc19206a00114e912a9cc8c4f56e5fa6b0868e3be6ac", 0x65}, {&(0x7f0000002240)="d99c5356a44b5edbd97d49eff7b581a056700e752f0b84f0049164c18291e6ed069c1ee42d42edb35c35f5a0205da0f00dddd83b045b4746fab3451b1290c9b269b1447104c2ca1b0f5776e150b2add31c106c26bd210dd1d23799e3604059447c55f4649d38e2c927359ea51c545b76672214da375ecc740515fe", 0x7b}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000300)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0)

23:56:41 executing program 0:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val={@val, {0x8864}}}}, 0x1a)

23:56:41 executing program 3:
r0 = socket(0x0, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

[ 2999.715472][T17098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:41 executing program 4:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x1}, 0x18)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r4, 0x2}, 0x18)

[ 2999.796460][T17092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:41 executing program 4:
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x1a, &(0x7f0000000100), 0x120)

23:56:41 executing program 3:
r0 = socket(0x0, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

23:56:41 executing program 0:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val={@val, {0x8864}}}}, 0x1a)

23:56:41 executing program 4:
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff})
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000200))

23:56:41 executing program 3:
r0 = socket(0x10, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

23:56:41 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r0, &(0x7f00000000c0)="f7", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x54f}, 0x1c)

23:56:42 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:42 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val={@val, {0x8864}}}}, 0x1a)

23:56:42 executing program 3:
r0 = socket(0x10, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

23:56:42 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="fa04fdbb", 0x4)

[ 3000.224015][T17133] wlan1: authenticate with 08:02:11:00:00:00
[ 3000.245475][T17133] wlan1: No legacy rates in association response
23:56:42 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002580)={'macvlan1\x00', 0x2})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth0_vlan\x00', 0x2})

23:56:42 executing program 3:
r0 = socket(0x10, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

[ 3000.270353][T17133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:42 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x0, 0x803, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

23:56:42 executing program 4:
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000100), 0x120)

23:56:42 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val={@val, {0x8864}}}}, 0x1a)

[ 3000.355831][T17133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:42 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x9, 0x93f, 0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48)

23:56:42 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:42 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x0, 0x803, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

23:56:42 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x5, 0x9fd, 0x84}, 0x41)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, 0x0, 0x0, 0x6c, r0}, 0x38)

23:56:42 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val={@val, {0x8864}}}}, 0x1a)

23:56:42 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:42 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:42 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:42 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x0, 0x803, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

[ 3000.789696][T17173] wlan1: authenticate with 08:02:11:00:00:00
[ 3000.804927][T17173] wlan1: No legacy rates in association response
23:56:42 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000ac0)={<r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000b00)="de", 0x1}, {&(0x7f0000000c00)=';', 0x1}, {0x0}], 0x3, &(0x7f0000000d00)=[@ip_tos_int={{0x14}}, @ip_retopts={{0x10}}], 0x28}, 0x0)

[ 3000.834260][T17173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:42 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600), 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:42 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$sock(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000000c0)="9b70e68f7aa5f45a902950d5af38a84f2b713289e5e105912cbce5cf643c0d068798f6b6453cb848a5ed6a276bf6afdc58b321", 0x33}, {&(0x7f0000000100)="281ae619d88b099b26fdb4cb3634c45ada61f7cdf5ccf239c1ad17e92749c27eab11ca710b9334790ef253e22755227f3ee21122d94fc562f101407f4b7534e357cbc4fd958c42c9168d0ce33ffa646f4781fb2190a7f9ab3a23f45f3f1db4062e766a39661c2d411f3178f28d4915a6704eee011a357b277d25f41764e95dbc1adfd6635ae7ff28af64f9ffe76daae74c41d27c91dddf43", 0x98}, {&(0x7f00000013c0)="c2541a6cdb90efc36e428fb555c1e098bd44bcf116d3c589f5dec2fd96e8526dc8dc28e8cb5736356f3c312507989f7b46c1ff1d00a4eadb4534183252f78723af69c9c50c40d83f138b58217f7755f7153e80e3600faf9804d52d8d6873048c0937c43f7732f168c1e85121f89c433c6fbc3cd59fb661f323f3bd52b7fc32841f38036e8361d14f6cc6fc8fd6ed3cb7c2c91c2177f30159105437d8838e7fa3cfc7bf69f0561b63e0031f3bd222d15c47f7d4ad9c5c5ccad59206134e2c33abd4c1faa3711a8e2d7b672c06a13ddcddd7ad6f8295398112378da341a3df9d5ef99f83691662a5534a2f197ee16c5029b0ad3a83affac4d753c731021ea4d4ac692885d37d9ca2d8dde2e2261eb3a22b2cb3cd4d9f1b1b1c0a163f14a5d76ebee524cbcdde8faa390ca54e1d15d8fa025048b89177d47e66d56ff5ca69050c1e05e62b150307cc17777ad8414d71612578264efa02fb4354062a5a72f363e38dcf88342f51e270c4ac025a718a9f09c262bb37875f144160592fe194a54beb097eb31931675d2d1c1f4cf12df7ea97a36baeb2a863ddf1fb9f417634372619aeea4caffd26091fbe3fdfb973e58a15179a850cfc2138fc09ce076f15eaaf7b847e88116dd5b74276a3609ca13a4ce0fee20985557dd2125c22475965c74f55c604206fed2da704f21ecbc11c4f963280864ec103a8f873c72d99f57c70e3add07526e11ddb7bbec26ddf0afb19abb1b7ec648cf51bff97c46985db8d6142a8026a4968d47c1686558327448133d750614c2f3a723e2c7dab544220769a3acc116639a675ab56aae1c0bc6f1e7acdff0c057291136145d949a8555a1cb3d3c8247a92922a8bf2beb29796dfb033d4fca1d18b794b03166c66a26f00f15adc0dd29f8ba403de954ab19c8b55e92c44c732ca7dd119d652387350387f43257e0e470c3473bfe93b1c0487f863f5ac8d1d2fec6a2f0f0dd6a124946d6c21e7e9161f4f5fc5842e13a0bdf1202967b22decea41ba5eb12337aa656960b2549e6cd00036e57708b64f227e221ed63053040617902142e7e12f00144755a345abcf3a024746b8b259c35c53cb4cd4c89e4140f4c84ad37e793746945573f359274d578678e607fe0fa92c122b958b7ccb3e1f7fafdacbfd0dfd28bee22669e860d1354900cf9850d4e37fc8db6ec002e3ea647dbea0bd556f702efea9f2bf8dc34e7a68358b460eaf041eb72b8a7c78cf55fef4d848e03245a60ec8c8d6aa8587a293e2c59d5958dbad4f780cf18c15ca55de5e1b571c1bd85dfc1f209155beee3962cc18f692d521a269b0ee2979ccb486a4866d5b2f76ba2d90232ee16a5659901aedb8209980f17e9b4e26efdff6c0f1ac79db87e624987073f9edd3b4ceb29d376a9d5aecc50e5153cab25a8ea93f36103caee98edbe5a84ac2c098530e566db2f0633f1f69f000ee40f300c988cfc1e7d5885342daeb56cd2b5b3a62bf781ac6be7dd9b7a935bcade9f4f1152da5084b398ffe3c85d121054f5a85fb53cb200423a01ec8f9a411f04789a443b87e9351bc98c2d2404847aaad61d0ea30e690bad9a4a0be98d12e329cdeb4edd939740666cdc280610d46c8873d0717deba7757693e401c5c48ccfb92ef0d57de5cd804df11ff0f97845958a4ba2c68275096664597c1cdc872833fbddc8fafd08bed46683fa90af41afbeb110548452c9f7cab1e190085ba6878df28b90e919e2b5631ec78316b9d975de43ebd26e039d3cec34b047f8ac5bae3210f8442bce11279cf02e76e74c21746c5a402319eb3284d7d1c7122a8771702acd1ba238eff9c749c9e5a934f2c40922582ad6021b072e6e036344dd871ee8b14bf4b84a114ed64050879db8bdae0e022174aa646b4997608821f0706f3d4f3a0286e31b64e57d2379445e205a928a526379c2ce9ee87b996990251752c04a59b75f93699897226858323781e37cf17c28710d10e142690fa7e4dd5c0900b3a58f41cc983e31cdaf706440a3d2a59718adeb859f5b8b0922205afaa50e47b042133127b2f4b11b41425e555173d38a181e9af9c1d731f06567bf386b8b9f839b3179c82c114829e718367fa32cb617640a8fe64931941be38f789d28a474ae7d6f0304a3baa8fb22cdfa3219b6223b70241a1da00ab1a7446e8f87944956581f7b3cd7bfe533accd4eb77a09862a5a726dbb3257ae890b66154bff41440aadbe04b718d57e2a21f60bcbd1a7271e161850192005353b224cea26365a1992c33aad472d95085eaaab2b66caee3ec9b1fb561c1c13f0dbb0ac29bd3644cf6aa16e61a3766b5b9af6e8e1eec442c6082d1d0f6af5bf611a339e5025cdb2154f47d01b77926feb31d72ca8a7c8a5a91b21189b379171c4f0320fe97250c04e23c4ab81483fb11734c014ebac881ea992c25b18304fdac15dccc8eb8c6a3ede86b6a3e609e9d7556e7256c243e74e7c6ffc0c0f01eb4607c8cd908b0c383567b975d0930b55643f0f1469d4af7996a0ea0a38b901d98718c41f5f7c4a071e90ee56274dfd151ab8c9860dd8692026e5e905192fcfb12a89ed0e6ebeeecfd5b00da84cfdfe945c4a53ec1a3da862b92ab9e8f1a9e7252c62ab0666b643c48e02d5402700a434fe165cd8127b511d728b8e0f1d7ac06118c78d268c624d91425faef48f1708450c1dc8157a81d2f23918c88cf99947a581728a090a5c26bc5b61aec96901c7b5170e375a8415edee7b6013416954b5ebfda982a25f5ea92837d2f85523af7e4306674213bb4437a2bb62c88628155416dea992ce29a510c3daeef3ec79babba9d861e3c614fb231e4dbbdff2ef24e31acb29be7e2a3baf9fe04f30058b4dcb9a2977c5684e04cba01aeb0ec223cc189aa0ff382134b4df4477de512c1d69e0c4de48340561bdc19b7ae21af674c247beec4ca92efdcd00c4abc669743682f7fbc272a3d416952e81ec8bc771b2dce447d5f056477b92cad1072dc9274804ae8aefd56dcdc450f86d7aa03e4564412e543fafcda146a202f556d8d39d8a4a5270464c745a7533ec47176cba11524a595ff385192e3ab671243633c68691b0b21d13bb947004c63ddde36977b7197231dcea52208434ba4c47f81e235deea0824ae44c542dddc61987570194e3bb3fbb8233d217ee4d688a8c62160436e7cb8bbf7269a08bb008795389e31c00fbd4b06b0af2a572164ac8d5239cf3b00e66b753060cf0db26c20445490b604890b2ef4d6f29a9c541b0559bee4eafaa537bfbd9b1e5bf5d1ce14cedfe1a90bc345db9bb863c050cf0fe18006a0198cedc8eac1f045abefff131a44f410bc27583487e3df38b40345f22dd63f9a6019804be225886d514c02c1b0c6171e127f1e059ee35a3a3f4bd3a1e5806fe590665936156390d0935db79bfc239db4fedeccd4a0b8cfa234ad30963f3c1f72514f71f50eea59a5771335bd3292a4ef02cc82078d5ee8fceb1fb36589abbd0b8a9aec7cdb73fe3372a32ff95d7cec3862d40d8bf119b127172d0901b575be6f606140ab384c7affbe79270206ab3953a930dd02f711d21fc72aad7d6c4c4c538ac8512b389c779424d39980429443536ee6d04c442b4fc88af4039cfea4c18316093e81ef5e5a4b14d65197963010eb6c4d7cfa782ca7344b3e9022db517dce2070a76fff7922d69f21a08140c65cc3a0487e3cf996738b2c8d93b90c1949e71115dc34ee297a5b8e38e392ad2f85f086835542d58d357bef65974fb6f843fc31d456bc11ebc7dd7a9567b0ba9d2e9195f8b27db104275a63833988a747df044c4246fb545de0f9df7617837f5e04dce96c7d403a8b495f09eecc626a42058181774ccdf03b5b3ed8c864c2eb6056c1f0e1defe611f6dfb0e870e4f29b3e979723a79b2b3f57d796cbf8048c527ec89117586e5403885cb92a2258e15490f76bb124be824c84c8b67c777115b4b83e3cefb6074480741999c681f3d44c11625884cd1d871f26f140b67d164357315dbd251bd3a3a139c7cc9f8adda3f5c52712fdbca35b56f53423d063e17b813efaf8f2f2ef275af284c2ec1854d0e92002cfea02eeab12af74299defab4fe61aaffec9b200b29c51b14f8e254e9ec6b1370ea2bba15ff70ac9070c033ab1e95d9ed08f5193257c94e882e49a44931c13d481d82c09d3fa149d249629653cd9c589b2ca476cede339594fd25684559bef865f66ab86066c2f89bab0bb07c28826117019f7deab04a759b8aac6949425b46e7274917f461f1ef0158c6220a72c768e7573f0f196a8298b2269d55c084e5993ed9836b94cf9addfcdec85f5721ba3812423d1ad8460cc538aa1a2c00bc19560d7dbb773be7473ab43dcc627db931f979fa95d8c2f2221a8741156986daf3e3753d12fcf686b4135bf5f0fbb38679affba10cdec247888f1a6ceb84ab6404667a77e05b678fec434c20c841c7e151e66e12cfed721501f381379c7bf959bfe5c0092b1c106a841030ea4a7aea19fc5780bd67263342a7a5f7ce01e20efd9b63fa5eaf6418ab7aa0eea9cecbe5108d84dd919cbfba34b22d7660dd1ca36d168469b008d965f7598f24cde1b71574dfae7fe84bac8dee9b3de800435a66756c7f92ec575c8ed67828f030f15d24e770eddbdfdac6c8f9894c5284914eca5252cbb4299e3a63764b7c77283e20d41f89c183aa56c3a51f19f9e6eaaa2bca9a263bba8a8e0b0a14a24b9d000fdc176113da47ef5cbad95a5542493c4b1c8b30a3ab6cb473488bb8709b8647c25d2faec77cf4ebc3f73d2e0b7fa6fd1b7f10fc96ef6b0eedf5028b9313f7e2e4fce0f6e8e73575d854a46ed186e0b53f058689f8776fbbe3a85e658515fee90901b06c6e9bb811c66556240600d9289824ba466c6d875b889cdba395e9e2fe0d199a22ed4af2298da2dac7d3c7cfb02f1bd97710b9837ebf8770e42bf5c7555a911a0417167004d113032a136e870721caa481884f99aba361acfe9a2baea934ef79fb4f5a87870589b4582501573ad53b8ee524b90b5ea077066a425c96b51be51c66aaeef759a06c", 0xdf6}], 0x4}, 0x0)

23:56:42 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val={@val, {0x8864}}}}, 0x1a)

[ 3000.910565][T17173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:42 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600), 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:42 executing program 4:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003a40)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000003940)='syzkaller\x00'}, 0x90)

23:56:42 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x0, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

23:56:42 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600), 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:42 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x2, &(0x7f0000000180)={'veth1_macvtap\x00'})

23:56:43 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val={@val, {0x8864}}}}, 0x1a)

23:56:43 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, 0x0}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:43 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x0, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

23:56:43 executing program 4:
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
syz_clone(0x72a41000, 0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0)
getpid()

23:56:43 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(0x0, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:43 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, 0x0}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:43 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val={@val, {0x8864}}}}, 0x1a)

[ 3001.279473][T17208] wlan1: authenticate with 08:02:11:00:00:00
[ 3001.292094][T17208] wlan1: No legacy rates in association response
23:56:43 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x0, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

23:56:43 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, 0x0}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

[ 3001.326533][T17208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3001.347144][T17208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:43 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}], 0x1}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:43 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val={@val, {0x8864}}}}, 0x1a)

23:56:43 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x0, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

23:56:43 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)='T', 0x1}], 0x1}, 0x0)
recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}, 0x100)

23:56:43 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}], 0x1}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:43 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}], 0x1}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:43 executing program 4:
syz_clone(0xb2c7280, 0x0, 0x0, 0x0, 0x0, 0x0)

23:56:43 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(0x0, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:43 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x0, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

23:56:43 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {0x0}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:43 executing program 4:
syz_clone(0xca0000, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)='7')

[ 3001.783103][T17241] wlan1: authenticate with 08:02:11:00:00:00
[ 3001.801866][T17241] wlan1: No legacy rates in association response
23:56:43 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val={@val, {0x8864}}}}, 0x1a)

23:56:43 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {0x0}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

[ 3001.837060][T17241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:43 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {0x0}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:43 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x0, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

[ 3001.894037][T17241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:43 executing program 4:
syz_clone(0xca0000, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)='7')

23:56:43 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:43 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:43 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x10, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

23:56:44 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val={@val, {0x8864}}}}, 0x1a)

23:56:44 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x10, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

23:56:44 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:44 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(0x0, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:44 executing program 4:
syz_clone(0xca0000, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)='7')

23:56:44 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x10, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

23:56:44 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c3", 0x47}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

[ 3002.366778][T17284] wlan1: authenticate with 08:02:11:00:00:00
[ 3002.409178][T17284] wlan1: No legacy rates in association response
[ 3002.431673][T17289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:44 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

23:56:44 executing program 4:
syz_clone(0xca0000, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)='7')

23:56:44 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val={@val, {0x8864}}}}, 0x1a)

23:56:44 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c3", 0x47}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

[ 3002.463796][T17284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3002.540729][T17293] __nla_validate_parse: 18 callbacks suppressed
[ 3002.540750][T17293] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
23:56:44 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c3", 0x47}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:44 executing program 4:
socketpair(0x22, 0x0, 0x0, &(0x7f00000006c0))

23:56:44 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

23:56:44 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d", 0x6a}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:44 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000340)="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")
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001400)={r0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000013c0)='\x00'}, 0x30)

23:56:44 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

[ 3002.783691][T17311] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
23:56:44 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val={@val, {0x8864}}}}, 0x1a)

23:56:44 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

23:56:44 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d", 0x6a}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:44 executing program 4:
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)

[ 3002.924344][T17318] wlan1: authenticate with 08:02:11:00:00:00
[ 3002.936496][T17318] wlan1: No legacy rates in association response
23:56:44 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d", 0x6a}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:44 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x10}}], 0x30}, 0x0)

[ 3002.965026][T17318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3002.987848][T17324] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
23:56:44 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

[ 3003.050382][T17318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:44 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a", 0x7c}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:45 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a", 0x7c}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:45 executing program 4:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
syz_clone(0x50809000, &(0x7f0000000200)="d5b312a8d8a6e7751dcd43e3acc7236d2f3a90248e278be60821a68d6fa7f4bf4f103472f0d6fc05b856ed81e557e24413be482736524d60634f093d4bcced5f0d09100b4cbfeaf74d950b592436937885b2d7bb46b2025be6171e73b49f9815088c76b622f8657950c21a9215d9402004", 0x71, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000340)="5864d68e5c54a32e1c2fbbb54bb8cbff961203f4708d0a289a26d62802db68a72ebe1a37c1790542370f7a03a612a332bafcedf90f0e797256d6e053f009b8a99c2bbf9563dbdba5a0eb72ccd9d648949fa408ce254680ec2089d41ecf64583389081efcf2b4700e66448a54240103a619a9d7cd8e6fa320ee0ba58e5b8c932a8d8f056a04de1ed933ede82b8a540d0b4a348070df6d07bc9217b6d789317d91e5bbc69f72bce09c5f5853bb0e124b55c876193be4eafc64b36e28024ad5b93e915dc2c496adabb5c148fd6564405590f0f67384e65e4c6c701cb18eb08b43811e13e335a56a8dc37b35da2ea261ccaea03e6917a530cdd03db84a2872409f6c2e3cbda5079af35845bd1ac546099ea97e3e0293bed9456d7b3b8422e8aa91777b11f25f6971293759c9dbea707899577fb307c95f98e362a8e280c9602014dd6fde9a8306994a086505be31f6cb4b6c187453ac29384bb460185c48a733825880dab54724dd3a351971dfca99fc8c7b5980ef7ad2adc9f37e8bce7fd7bcf0a53141f8670d44788d057d26c5786f00e2f5c77969c372271884f46f2204ab9006524a058254b52029decc55e2f793dfb7a7e897a12d8d611004c27445f4f269697349d32159634c99caf989972a2dbe864b0f79d6180bb569cf2117903354a390686bcc27978e37f353e63a7ed193370aa58c431ec6c9f9b44e623efcd530d073a25f8d794b1720a4cc4371a016f326f64e734f7cee2ed045a5a5206ace84556b96dd4b0ba4ca26055773881a2e41cec70bf397a43625b7dc39b5aff309e42d39ef95bb944016badbc8213243e4f336ee1e8fe344ef033841356b82aff8f81fa3d0ee03b001cc6667e41bcea8017233196a84cf26d52e05d45cf099e2a602a3bb3973b7b0f3d7f00002f98f75917aeeaaa11e3a087587b7cf64e6d116cf30189c0eb55ddc449f17c803f7c148f94d402faa5b182ac8d4a241b3b3ea244650c668bfc6e489569d9bc8558e179946f79983124b176291fd843aa47087e423be584c16507a7db436e4e856b74ca2e54160edc4e9dcab949f4aca0b0abdc3af4f251dc66c2cb6daa665580ca11d4d0f218599e9bc9b7164487cd412f545bb76cf31b7541137e62a99e4928ea30a84aa231545620a62316af0379621080139a571c3eddbee293c0fc3e9331214e45254d593ce7759ad61c50de6f894124aa483835f652adb34eadee35c7efe4f30c9b897a29de1d282c18a4739e1a2693eb65292eaae2b5ce33997ff655f9e38da0a5b4059236e413d1749d73a98e282c2ef96a6585e893ba241a1c0901cd52218c7e21b9d3011626286148f5378e0603f687c7ca5c00a60a33c08020abbb2927e8421d3cc1fe9af40b6371f901953240eee56369ccbc40bb225a60a8a8ab7ca36005324a04e148fb93defdb4f69ddc6da514e7547b338ca6b3061b5c9299660edb5578e06cc055d0d59433bb76a1a81e61240798af9e3bddef4d5b0e146cd9b8c6fe934567cc7cee750f2df03b3b3a6333ed94eb37eb12e31fabfa1e48b7c5c87d2ccdd7b687a1e0cf005087737955111ba822548352d04d3f978e6b1b33b05b36098aa7aaed87a582218af2902241fbafe4d0e02387b2dde268cb04c91542b846df8205af5a2c200195f4fdb9f144e2be4ef897949b92ad57e2e04b203ba15c6a7e2cc9476ed6c7f9245da01c58857d110c001be6d1f141263527af73894ae0841dbaf961044da87786b0ed766ab4c752486c48e0693a05f348e271f9212e3999f6945e13eeaff1328ad5edaee7089e105316cc1af03716bfedd07a453609e0fd39e8ea5f20e51f5330503f67cdc808534051df7c592eae763f7de030df9321b2d09dafc9d44fa1f6ff15aeb85b65580b02d41816ccd414b9b87d6c85a6bff49187f3a3c78678ddac6990a6bef9639203622f2fa41d5a6d5e7966b6084d9b29e21db08be32f2c9763741f5bac3a980c12930ca61cebf106182bcfd41b8a52ea4642263546442de5e4816c3466e9a566429debc0e35e3cbff0fdc4882eeb4f8a17fba8257f0a2668b9a8b14fc461604ba4a2a4231bf5222575e76a1580015b9218aa7639fa040a1d69caa8c5c9aa2d3655bd4c55ec16c27141f77d16d769e8656d064e0e8fd47d1b8a90bc9c00215d5d22f45c1a36b798c40b5e83d7baf118951c420ce9dd21165f7808e318084b3a0078b50444eaf53b18efd360fbfa80f5b05a607d23de175d3a11e8387f7573107207164a6a5c1a8f61fc67a7ce4a350ec55d4d5ce8f95fb877e3b77d640a5204550978dc7ed7443d3be3b7b6233025083ee77c528bf009fe2ff18224ed67b06c0c5df9a6501a2f0d0bd4ce8233b875f36efaa5e8646289ca7615362bfb0f55fd86d7db3d6e1059374d81eeafa4ec3ca212931075a258854f0bb05185380183fc6b323a403b784f5766004803dc8374cc96453f4a4f00939ab45700d9fa37c1fcfb76e99a99b1acd1ec7624df61db1c526405e7b2eba00846d40736f537082c5ca6b4559de29a1271d4fe6adbdcc7a18db7cb5fbda3891d8f91f868fea020306e29911c5df3bbce624c84afb85691433bce1e23be654928ada2af90b0e766bf5847f8b6b96d8d181d4073046a21a0a3acba68ab646e48fc0bc1ecd24546a552c32f28640967d920667855b431b29a0442f19ef2533b9fbc53806c43f72df1083d5b7f495bdee51eb8646f6f6265bcfad21eeceb99703459c1040afa6d4a8f2dcdfe61dece0f21469e843e82a2a191bf4a8f1edb8ef4e49936d3a722855eae4fdeb584b23029cfa2f29d7527078d85acbdee78e2c6336aa4e6cada1f93b0071b70ef3951d5573b01a9b2d026d4f5849abc334dad2ed0edef82c67de259364b70829501e1a8a649ecb837d1cbcf141257b674926c7b0cfcc08b2b7dafba904e27fd326a7f72c998bb32f589528e8ea17bc276d4075657f7b5dbcc173d657200be79917b5a799a8c0ba9efaa1ca798515f24b55e46b54931fa23a7e12f906a530df0dfaec4c5ab15e1c0171070aa0037bde7df61354de688ff8fee7148cc3a0dd414bbb693373e20dad54363dd4fe1bee6b887cbfc7d39e63258ca5ca7eee7d8dd7ce9252755e59ab3bbcd6ba2c8b77f9df32b4bbeb7b75ee9be823babf6ad03a61453f7fb4a563911c52a9b6d55c573a68ec621e73e2033bdd2f42faa046f4de1a90bd81f42d05267a0cb896c534c260a7a7b9521b647e10587bee90c11d44b7221940e7b0b4f2a252d14b51d974572fd9315a57794013b88e878895703c0980eb2e8aee297f35c44268b63818c3e151ace4261a4ce836d336f99f6535cc6509e7749606ea107f4d9a241f0e69f409e53227f893e4619a2c2efa1169f43bfb4bdf5d91afc295f5ba3cf1202bd0c681bd0c5cc2f6c685eb89583b8800f10ca30a5e788fbcf2909a4fb3c148e29af6d7d39a232df65088066de7d84d424c4a6a1072eb13e8569fa420382cbdeb6c99f9b8587e58499859ee19685a89fb0f96e0a32cd1b8f552690e7c56214467d6e90b14697a3564b26ea129ca2316e828b46cda101fe0f8dc6234eec224263820fc16a1ff085e7619f772a236babb5f6a6d279f3f8ec4a5320e78e8f99b6418badb39395f1306f9d6fefd860f8c4374a7c359541a317c7d59153a43e266d9f90e4896d45ed3bcb6525f298331f00aaf741835995fa0794370bf99506e64fb0cb58e1511cc1b4e69f3f9ef787a010245a2ceac110f8246131e48ff65b0ac17cd5b366176b22983595f9162fe6df4cc1bd5d4a900903203ba2360109eb9b0d1b0e9dc246032ccb90421720bf70c74341f3aba02bf6db2d9d490f849c00be27918bbd25f5c5cc7cf7f3ce9bf475ab63eb7f212c9d8c5536aa5a34ab80a1bd961949b1212bf2122e40dd3baf8077a3d35d12a76c74c6025e469d8957b4f7d0060eae743a2d8638ddfa7cc7ac5597b67eea5279e8aed6f925bd3d472a3ae5f0d75e7eae16706d1f44ab021a8fd14d11d5623838b169a7f9e93bb9e3a9019d8b94319d0fefec1407d50f0605c51177224617a400226b1641b55b1e45886a48fea87cfe43679dc4019f294a7eed0f1cc5cf4bd2afa45372a0d02ff1de69b424ac553dcb9f9fd854369dabf5331008eed3941870a65b64da43d17add99556a567242de4dfb72556e4b74c4fa3593446985916077c4ee50cd5c9d2a315a1bfa61c2b829e13449f34e66545bd362a2577bb1d4c6e53b61d3fbaee76921532a4fc387be20e7d73d0d5348849312a8fd41146a3da53a13f1d7137b1dfd79d6d0aabc8c320cfc7014a61708d1c34f1df026327cb43ad35515415c376753547719bfe8538535b3e2057e26bc8dcf42dc28c0b08e908847ecb8593d78ae99c193024533615842d0d8ea07f15b403452940635b3cefa26bcd3dd90fe121752c52954b133b995d827756a326bac3916ea956fabd5f4b49f13d0bd6b96b05be25a320d7c98d3075af986433a54b3106d9fe1a6cabcf8e39fa9f134d18b7c0e733d48d75e3f5c63350d0a13a152061f46a0d0319879672d4a1fd145085f65dfabc0f3caaa2aa9366cc95915fb2272432c69c051a39a81f70256dbf56aeb62d7864063590d523d2eba7a4b42ccf683e48d624773012f00596b8e32774610838436d923a2e8ec11754c32fc59f4f3df0b50149a9651620fde25a89c9c0b7144962ac2c3aa00d45a1e3fe7f95aeb0dd92f6b21f06b8f6b4c4ef456d07f91c36d66d803fe6cda8e56a7da397918ba7b6bc97bc5711379f906be6aea4d4db00a5f91edcdba48fe15c9dda8aaf6f153c9dc0c942a718eec67b293e8420014413b8159766e04c055acad43334d3a511a8adb5b5e0cda035a8e6e354f83aaeffb244deeca5138e34456412a70af99ed48d9507b0489025a5e70756417352f6529f307512d8c293a8a9711d42b8d876f1909ee9f2a2abdf2e77ff9f5091c6dac98abf2a2350ac374764fffbfb2a1e6b45991890eccb9606c47d0f655af50d5b01d00d80eb216c7a1d98361ee9756f097d58185487e6c7c681c6e7d81ed01214d274191094cba3094f8242a39bf59f29fea71d5a0798d751b15b2a910f36b59dd4689e54250be4c302f17297d36db93ddd2ea58008970f13f7134cc0bd1ee2b402c2589693342a61bdff62b13baeb0ee364b8ec12e0fbbdd08b6ac9f4a0fdb0385d9b313f610b3421674fece847ca577e4b0dc950ac5296d580d43d259b2005839e9329652ce10f2f36bbd6a116187db2e1467472315e577e97034077d7447d3aeb6af0b3303dddb")

[ 3003.162001][T17334] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
23:56:45 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val={@val, {0x8864}}}}, 0x1a)

23:56:45 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a", 0x7c}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

23:56:45 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

23:56:45 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xb}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, 0x0, 0x0, @void}, 0x1e)

23:56:45 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eea", 0x85}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

[ 3003.396697][T17349] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
23:56:45 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x7c}}, 0x0)

23:56:45 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eea", 0x85}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

[ 3003.526009][T17356] wlan1: authenticate with 08:02:11:00:00:00
[ 3003.551984][T17356] wlan1: No legacy rates in association response
23:56:45 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002f00))

[ 3003.584357][T17358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:45 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@empty, @local, @val={@val, {0x8864}}}}, 0x1a)

[ 3003.631442][T17361] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
23:56:45 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a000bc0d5aaba7b30ff3683b314a40c2", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)="628961", 0x3}, {&(0x7f0000001900)="ad1f0504da59277b366d7f4d03cfb4c001fb08bf2c9c3c4eb6d4f948961c68012365018e9cae5eb22f08f65af4a05c9c1036406e5ae7ba12eb7b9c8d031cff3a4919232ffce9c37b2e075d93576a3f48fd451eae83682678f27f1e680179a2ca7db23a1cf260e2a0c30d5060a1e69ffb9ae1409b35918e8486204b4a13aca12564e3e93eea", 0x85}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x36, 0x0, 0x0)

[ 3003.673934][T17356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:56:45 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010411feffffff00000000000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x47, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_opti