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", 0x1000}) 06:28:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="088000000000fcdbdf250d00000008000d0001000000ada1b026461bb5e784d70a48c9ac29ac07a1a91e67d1e5dc0609b6935ee7a4c79b21e017d3c8652a7dcf33f8c2ca1158a8ccb387cccd7d4cb800c088023daa4a1d3090fa"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="20000010", @ANYRES16=r2, @ANYBLOB="55ea00000000000000001f0000000a0001007770616e30000000"], 0x20}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r4, 0x0, 0x4000001) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r3, 0x700, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000) 06:28:01 executing program 3: waitid(0x0, 0x0, 0x0, 0x2000000d, 0x0) (async) waitid(0x0, 0x0, 0x0, 0x2000000d, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x0) 06:28:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0xb0) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r3, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004800}, 0x80) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r7, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) [ 1061.448798][ T5236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:02 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000140)={r1, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0]}) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) [ 1061.507203][ T5243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:02 executing program 1: syz_clone(0x90028000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x200000, &(0x7f0000000000)="2607b78f448a9f3cadfac984a15001f0bea1", 0x12, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="a7a9722fdd04a00becf0b9fe9662b756f65c58fd88c1d371a81b6ff0199b343afb5c8a395a13b533f7c850bc8ab4767ec9105f5b539cc2fa87bd5e199096a222558d98484442f17d4336cd174586e9a43da901f8f043111827da907b97fd61793a5d87ee6021732f9763e30e4d8189a6623c34b3dd2858f11ef913c85978a93fa95e334b30fe2a98be9802ed089f8fc9a3043a6f5f57384efc3233bcd2384a7f7f16cc5b41") ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000180)) read$rfkill(0xffffffffffffffff, &(0x7f00000001c0), 0x8) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xa25e]}, &(0x7f0000000240), 0x8) 06:28:02 executing program 4: r0 = syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r2, 0x9d27, 0x0, 0x0) ptrace$getsig(0x4202, r2, 0x0, &(0x7f0000001080)) migrate_pages(r1, 0x9d27, 0x0, 0x0) ptrace$peek(0x2, r0, &(0x7f0000001040)) ptrace$setregset(0x4205, r1, 0x4, &(0x7f0000001000)={&(0x7f0000000000)="4f2e931de0d7672d9ab2105d5e8ad50c5c7a9f981bcb135a1757cc97fee0448851868b103b5e25c94b9f2d538774a1f894057bfe22d55015b3e9314c53fce9fbcc4207be3836ea5df2ce03d31ad88fce9bd69a9b4f66349811e8d05476a6f4ca4069ae7b754b5f05193f953ab07955593d7b06a31d43081da215b1836b9aff74542100839f989c3ab4728244b2da4623a2dbe1b6f681c28cdeb42d47ef28b0d1d5fd0d42d8795ebb86e477310ec333690180edfb208138911beedcab8871ef409d564430b291aa52c9bccd45d96bce2b76b0c7364379866172e7900bc07907f99b228ddf8efb1d4303172065d3c691a60582b56360bcd36e14c713c3b2cfb0ad3301fc45a01c2ad0bf107dac7af5e1fd4b8a335e388590d37d380e05d24136b7e632cdb8b4c3d82c8607ce16ef4fca6ec8a82f50dbe66f8f3042442d7137135d2226bf11911375138d0f1685e620b5fcf95f45ee715c0e81ecbef1b3129df7cab3617646e2fa1ba13c9d227a773e4a0aa1d4a74b89dbb463ac5fb40ac4826efecefb066a5eed3593b5c1fb497a1ab711003af5dd41fcefa3069dfb6251458077f9716ac4cfa52cc8f753a74e7966c5b914613202240d11a59433acfb8981258818e7f39bbdf0101d3759f0ae64371aa3dd5797deb8d45ee55a942210591ee7e847ac99d5cbc76c90a96876d161aa449dc4f25069858dee2cfbd662d39ca53109d0268b99d10a456e9f615f4c4aff5705559cd059ec167f44d3f49981b480e95ffec71f09678873bf5802f9a1e8bf3fd9ab029fbc1d9bd707555d759e9af837975ecfe79488dcad4648e34778152fd47769a102d98180b65b985d9a7c71cac7052b8c7c26c5d889a834fd1b503de7a9544453f99211f65433f80834215bbbc79c912de5e3aaaea5ff02d9b23c7e657b020349fa2840ae03e97de70e4f466416845407f92e132c59e2720a71153be0141b4e930dba2a033d3db1c8a81ef46e300522c3dca84e84122be52a6e5d74dfdb63031e8a10dec50db333e8dc5b4863ab6ec4dddb3776550e1257dcd8d5ea9f418ac4296390578e544b45d7b066f9117c1a9ad13428e2e349751172087096d00e328abe22ab1b099b615c7b0de8bd3a3ff45c9acc82eb96694801a03a72ec83ac5f0fc6fd6383ede9e6a6e90eba1bf0b9dbfb39e12db73adfda1e76c248652b9e3c19143347515b4bc10e5ca7fa48c5dc077865e7a2f5ab50756b1509157153c7138f5eeab5ab55ab07e14203ed92739f9086110bae56e923da3ac61e2471252a8f44c17dc1c9193dd5424707247392c39d29c25a8c3bb5c290f9936cf570fb610fe49af66a8a22ad46a064bd84b333abc87cc5d9efb446a479dad343205c3f79d2daca0f668403e7be8a9a3432dfe2ddaa5f0988e8fe1458c3742e3257760074aba9babb1c3366f915b0533f2a1b6a173bfc2eed323583564b9fec2629ccbfca907bcdd45935f489dea8bd6d91f2bc5826197e59df9b2b26d3ba4d2a711fd7dd1c4bf3788557497bc3dd24b09491d36bf30ca89bc92bf07e934e1dba6f645f8d7dce4ba266bba667dab180495eed96356e63a5ad055297caea236ea8f1f99fcb32a449bfd3b975ef24690596be955bb2c6daaf68523e1f150409dae3ecadd14d4b9225cd28492df17837af65b81da8bd895f2b56069d766086b98ac01c5347092c3f2b9bdc0df2115aed940fdebf37008c9c60c0bb4314cae144bcb4fb6b5d87ef1b7658eae609799d810ff59edc23db0bffbfadb9142902ea983dd6b3985ae4e0f35932c99701fed6aa837e78bb8d85c9b3a3e9cf488d486b1f21687b0a2f8565ce09e8183672c10814480a1b98fdc4ed54587622de47206f08161be170cd1f5c44a48e38a5a9df5abc96a972d5ca46a2fa272befda665cd3a0b6f99b33d35e2f1c6f39f2587f3bc36bfe83b480e079284e0273854a051b784cb9f1df2ffbc9c02c8550c80eedf827663156652c399427cc71ccaa6a22bdf0c4a478824241bbc28cd813eb402805bced1794fedc66ad488474538563280710eefaf8cae4bbe5d79d9273a761e8386ee2608408e2304f829226ce91875d677d6ff7aa8132874a90eb87166c11ef1bab2447aa466f0bed0d012624aed409e3b464a03466c406b21fcc7d8177d352ff4532a06149455cf80ea24ee66e7e5991f7691778ee741c9c6964a90e73f1f6d3e9cfdda51caeb6f7022ba7f99d5edaec9cdc5768665a12cf9fb763befa26c606ab093d49fac44d777e66cd8c8c4cfd6c5488eeee1f734975f05db5435e55d47b0c26e0e015064b0e5a5e0aa16e76afcbdab0912850734b71f5f5225ca979d3e3c436b94ae39b8722e33e8665ecf435c0b27490a2753d0956e01b44f623f4e6e69b1475380a56ad35c76b28a13edbbebb54daa787f95e6ae47b9426db0f2bca03b8913858e6611a2a497c4b97c53f2bd35bdd8b527da8ad62f3cc52f987067782d18206b640dde44d243f53d9548b27f3248607335718bc567f33cf4f6edbc6821b64ca59510f8290124b23831eee33d8b8cff2bdb5914f8938393e2bf36090b37f8c79f5382574a939ca24655187bbd717a583d8117935a513788392dfa6d8786eabd1f6448a351dce5f641dd22428b09ee8e0f0e155a92e6bd89896248e4ad316d70666a9acf813299346858bec9e3f9a2e8f5beb448bb1dc634622d8e137b7df23baacc14d3838c64d6c453af09a43ecdb519bbab1bbe46787cdbe0a95d38f7c491d03783f84ab50074634d18950ba87510e106cddb4dd5137a41afabd178227535d5b08d9d892327e08ab251447424f72821788e22ada57cfcd13a6b33753398c33f17eb63cd52f6599fd63aac3674675fb89f88198a7dafd523f1a7c91e3e13c1a060fbec605daf48754b297e3d671155c943d0df45a2da4bfcbe40626a2bb1853fb9fe6e0d21b5e07cfb251c80d237636fa27bf700494c0e0917741a267fb5f4fca471c6743a7399c3167e9898cdd0edf37bb4b3c55ea4be0dcf025236ee23e492a363d4eb7d0babe07157d1f423d2e4ff5dac6496277d3a1ba7681c0870f78d4ac09a13c8edc845ce480b3cdd393368b2107d31cd7ef290b666b00f6454c29244b5f0829394a3514590a080227186b373d76c2b57409064aa58aa5055de067322316b7eb0f3b5bd91290a988f133b97caecf534bcd8855dab125f9f70b7808bc66b310040e18dd34ba08dc74eac7c92fa82e880d1cf0735cbdf149915f7cbbae05e0a5b76012029f901ad838e5be88c313647aa2429900cf96807c9a9c67a96e42f557383ed7793c850a10da827f466bd0a34d48d49f6e588fd529d399902a2d76d70c0d9544e89a341c9e35c7ed0392a7e20372e77676880b0d2d6ba5f0a76831463ddb4ea00dcefeca24fddc3dd5fbffbb85c686f00fe5b267a6319fceb624871a4f70822c9c39f3413259d72d9350e6263f474f065f173c8a582b3c7f642cd0ab3cf1eb365446de8b94b1952d2d1a06a108369412e2cc38e755dc18ff1fd2e1e96ed5df084f8bd69128e5a08b70c31d68a269c873827db1f3c8606815ee653dfb078c111af49a15a1bf3ce4e6c9a377176ff46b95e69c3f4fdc6cf134e4cda7e8b3335e2337a82d47420318b08bcc1ae295830997b71d994e315b5f391be4cbed3d0cd5c0a1acf4aac7bee90ee9c1f62420328f0da48de3384263130eb337e987df227739386bbb3a99911a0f8bb325f870b4e7929727b4b0ae821604080aa266a8084ddbfecb3ba2f104dcba4c3ca53e3b9809f360d8b305f1c6b9f590d19be59b58e2e5f8de98032fb3551605b14b478b5404420c2db034e49955377d5d98028d82ee89a3917f2514e4084b5f9ce81ce892db3716313703af0293d477575044f0bf074fd0e9e1b607971a474f14ada833d04db2aa09025851b0f518601dccbfa530454dd066fe64c19bf49ea00f6d1118de7b3b255b06159805890d0b15037f40a93ea1aa3fa6485104845c6b2143699e283d646edc32d34ca0e47fe2aee3d2cea4be6471caad42d7238e18b5cab31f390a952a9b53d2eea2d337f2cb507506292e4b6d425e95c0ad2c2bdd3e5b667194fc13eb95f55d05cbf80ed6bd9094cbafd0c6e93128418de894419fc81c6f1d09eaa24eaa944cb73c8d6b85298f32fd76796f8230e5e2c4df7346ff606174e92d70f7503d88b3c2d7c9447f437c8858542099ecdd414a4f6aac8759ca25409c7575f96512ae9ead91b9d5b0b390e325f83733e80615fc5b018b3f69cf7613d60b77b01635825188e8a766d06bd62ffc18b6fde9eb9d4b34b229de886946430c06f537a5640cf05690fe1a59cb71bbaa020415d08204e69bc62d33b72811b60bb6d5bb216de227fc256a03a42e4d0bb23f7d308cf0446e5ab9ec2c5542ff17853c961740e222be75a33f387c7ef3c5baab4a248ac5b0f4912b86b900964268e4fa94c4310981ae722c9e600faae64419a5f21f4a93c33c9f09e3a899a2d873294eb8687e06ca7673e848cd5c839309ac29deab44fb9f3f1476259c55471fb3522f0687140f141e2427f382f9374ae8540ba5a92fbcf9c24c53f1d8cf336974f90c3bb2301391f1f8d280b190636c8be8a5c350f7314d5090b16e7421ec59cf1fbe012b93c1ba1bed21ba80d03a6b5baf2eed5ca8f4cd86813c3dbd6c81b71dba511cf909179bd230ce07615be60149d18ef57fda36e432043b994979f5b48da43cdd3b2c02b907969d5a01ab0e7955a7cbbd258b0b4f992f943fb152b9dbf53f838c2fdb96f29dc00baf058c730fbfbcb681e3e7a7e0877f1198ded98ceb04de9927864ae5ccc58d97b594c41699c2a88d38366e70b0ca0076b0fbcc31ee4fe241e2578d27c696883fee638b4785ab41cd0d1dda48b40d4d977760832736b242b6bf094697cd8ee2e7ad1867a5bc26dd817b74c973a5d4cb5153d0c1559ebb7d501f913f2419ff8e4561c79560c83424cad325e458551eda8d131f79acd38994d34711fb8c7d058c1d1cf49db11e5746992d845c78a37efa6168bae131af54891f263e9931a88f5d4a80bd01e80a0f71daea09d64a62eb3cdd55612b80269dbf46875a9188d591c4bd1049fc0ad9d985dc6fc64142fe140821ddc3d1212250601e7bd45a0e5cd781d6fb101c29e8d80df580761a79e2274feae9376ed2b61bc5b2ed2648f49737177d2cf1aa4a489507e2aff7084ecc678cbaca6cbdd6cca5787e4859a35198adef6b7a552a193da08e5f726f48d2962150756b44a68a5f0be7d7e54e00fd062ab18dd0f4df76ecf15e8ddb49cef78c5fb969a1aeaeaa0da0207146ac7d4b2217006ab2627ba799b7616f706a250261b90872edfb6a6ed3f183dd33512baecfc907235a70a20cb57fb3737e8b0c9acc927bb2ba723bbd6571874c2042947096c8a6ede462f22b1904602fc855fa93f4f5e34e2250f16a5c041cad8d1b1d673c5bbebd8ee5c5970b0f4282967f8cdfd965423232323656d9f89887070287fb5deb36c3a2adfe3d7dd17f4e7a24c92795dd13be936791d347a3292aee8a8eb64b13f5574b441e6f1c87aaba31c75d2c279c72b0c7a5e65ed8edd1e51ddbfac1566205e6bc757a362b747036a3d464f2eac7412f1dcd0e050f7c241b8e4d063b6f572cff7af8b7b54a1bc268bbccf5e184863c496ba981cb7bca8b8513262f9bbc19f66efd66c4476cb62d59a8b41d2e15238eb1657e9469f77cf943c7fd92eb99eaf9f7d57842f01914bf90fa0d9ae0bc1d617f84dd97d9bff836737cc423d929ae7a29ca2217f7e342f302c0e9b5", 0x1000}) syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) migrate_pages(r2, 0x9d27, 0x0, 0x0) (async) ptrace$getsig(0x4202, r2, 0x0, &(0x7f0000001080)) (async) migrate_pages(r1, 0x9d27, 0x0, 0x0) (async) ptrace$peek(0x2, r0, &(0x7f0000001040)) (async) ptrace$setregset(0x4205, r1, 0x4, &(0x7f0000001000)={&(0x7f0000000000)="4f2e931de0d7672d9ab2105d5e8ad50c5c7a9f981bcb135a1757cc97fee0448851868b103b5e25c94b9f2d538774a1f894057bfe22d55015b3e9314c53fce9fbcc4207be3836ea5df2ce03d31ad88fce9bd69a9b4f66349811e8d05476a6f4ca4069ae7b754b5f05193f953ab07955593d7b06a31d43081da215b1836b9aff74542100839f989c3ab4728244b2da4623a2dbe1b6f681c28cdeb42d47ef28b0d1d5fd0d42d8795ebb86e477310ec333690180edfb208138911beedcab8871ef409d564430b291aa52c9bccd45d96bce2b76b0c7364379866172e7900bc07907f99b228ddf8efb1d4303172065d3c691a60582b56360bcd36e14c713c3b2cfb0ad3301fc45a01c2ad0bf107dac7af5e1fd4b8a335e388590d37d380e05d24136b7e632cdb8b4c3d82c8607ce16ef4fca6ec8a82f50dbe66f8f3042442d7137135d2226bf11911375138d0f1685e620b5fcf95f45ee715c0e81ecbef1b3129df7cab3617646e2fa1ba13c9d227a773e4a0aa1d4a74b89dbb463ac5fb40ac4826efecefb066a5eed3593b5c1fb497a1ab711003af5dd41fcefa3069dfb6251458077f9716ac4cfa52cc8f753a74e7966c5b914613202240d11a59433acfb8981258818e7f39bbdf0101d3759f0ae64371aa3dd5797deb8d45ee55a942210591ee7e847ac99d5cbc76c90a96876d161aa449dc4f25069858dee2cfbd662d39ca53109d0268b99d10a456e9f615f4c4aff5705559cd059ec167f44d3f49981b480e95ffec71f09678873bf5802f9a1e8bf3fd9ab029fbc1d9bd707555d759e9af837975ecfe79488dcad4648e34778152fd47769a102d98180b65b985d9a7c71cac7052b8c7c26c5d889a834fd1b503de7a9544453f99211f65433f80834215bbbc79c912de5e3aaaea5ff02d9b23c7e657b020349fa2840ae03e97de70e4f466416845407f92e132c59e2720a71153be0141b4e930dba2a033d3db1c8a81ef46e300522c3dca84e84122be52a6e5d74dfdb63031e8a10dec50db333e8dc5b4863ab6ec4dddb3776550e1257dcd8d5ea9f418ac4296390578e544b45d7b066f9117c1a9ad13428e2e349751172087096d00e328abe22ab1b099b615c7b0de8bd3a3ff45c9acc82eb96694801a03a72ec83ac5f0fc6fd6383ede9e6a6e90eba1bf0b9dbfb39e12db73adfda1e76c248652b9e3c19143347515b4bc10e5ca7fa48c5dc077865e7a2f5ab50756b1509157153c7138f5eeab5ab55ab07e14203ed92739f9086110bae56e923da3ac61e2471252a8f44c17dc1c9193dd5424707247392c39d29c25a8c3bb5c290f9936cf570fb610fe49af66a8a22ad46a064bd84b333abc87cc5d9efb446a479dad343205c3f79d2daca0f668403e7be8a9a3432dfe2ddaa5f0988e8fe1458c3742e3257760074aba9babb1c3366f915b0533f2a1b6a173bfc2eed323583564b9fec2629ccbfca907bcdd45935f489dea8bd6d91f2bc5826197e59df9b2b26d3ba4d2a711fd7dd1c4bf3788557497bc3dd24b09491d36bf30ca89bc92bf07e934e1dba6f645f8d7dce4ba266bba667dab180495eed96356e63a5ad055297caea236ea8f1f99fcb32a449bfd3b975ef24690596be955bb2c6daaf68523e1f150409dae3ecadd14d4b9225cd28492df17837af65b81da8bd895f2b56069d766086b98ac01c5347092c3f2b9bdc0df2115aed940fdebf37008c9c60c0bb4314cae144bcb4fb6b5d87ef1b7658eae609799d810ff59edc23db0bffbfadb9142902ea983dd6b3985ae4e0f35932c99701fed6aa837e78bb8d85c9b3a3e9cf488d486b1f21687b0a2f8565ce09e8183672c10814480a1b98fdc4ed54587622de47206f08161be170cd1f5c44a48e38a5a9df5abc96a972d5ca46a2fa272befda665cd3a0b6f99b33d35e2f1c6f39f2587f3bc36bfe83b480e079284e0273854a051b784cb9f1df2ffbc9c02c8550c80eedf827663156652c399427cc71ccaa6a22bdf0c4a478824241bbc28cd813eb402805bced1794fedc66ad488474538563280710eefaf8cae4bbe5d79d9273a761e8386ee2608408e2304f829226ce91875d677d6ff7aa8132874a90eb87166c11ef1bab2447aa466f0bed0d012624aed409e3b464a03466c406b21fcc7d8177d352ff4532a06149455cf80ea24ee66e7e5991f7691778ee741c9c6964a90e73f1f6d3e9cfdda51caeb6f7022ba7f99d5edaec9cdc5768665a12cf9fb763befa26c606ab093d49fac44d777e66cd8c8c4cfd6c5488eeee1f734975f05db5435e55d47b0c26e0e015064b0e5a5e0aa16e76afcbdab0912850734b71f5f5225ca979d3e3c436b94ae39b8722e33e8665ecf435c0b27490a2753d0956e01b44f623f4e6e69b1475380a56ad35c76b28a13edbbebb54daa787f95e6ae47b9426db0f2bca03b8913858e6611a2a497c4b97c53f2bd35bdd8b527da8ad62f3cc52f987067782d18206b640dde44d243f53d9548b27f3248607335718bc567f33cf4f6edbc6821b64ca59510f8290124b23831eee33d8b8cff2bdb5914f8938393e2bf36090b37f8c79f5382574a939ca24655187bbd717a583d8117935a513788392dfa6d8786eabd1f6448a351dce5f641dd22428b09ee8e0f0e155a92e6bd89896248e4ad316d70666a9acf813299346858bec9e3f9a2e8f5beb448bb1dc634622d8e137b7df23baacc14d3838c64d6c453af09a43ecdb519bbab1bbe46787cdbe0a95d38f7c491d03783f84ab50074634d18950ba87510e106cddb4dd5137a41afabd178227535d5b08d9d892327e08ab251447424f72821788e22ada57cfcd13a6b33753398c33f17eb63cd52f6599fd63aac3674675fb89f88198a7dafd523f1a7c91e3e13c1a060fbec605daf48754b297e3d671155c943d0df45a2da4bfcbe40626a2bb1853fb9fe6e0d21b5e07cfb251c80d237636fa27bf700494c0e0917741a267fb5f4fca471c6743a7399c3167e9898cdd0edf37bb4b3c55ea4be0dcf025236ee23e492a363d4eb7d0babe07157d1f423d2e4ff5dac6496277d3a1ba7681c0870f78d4ac09a13c8edc845ce480b3cdd393368b2107d31cd7ef290b666b00f6454c29244b5f0829394a3514590a080227186b373d76c2b57409064aa58aa5055de067322316b7eb0f3b5bd91290a988f133b97caecf534bcd8855dab125f9f70b7808bc66b310040e18dd34ba08dc74eac7c92fa82e880d1cf0735cbdf149915f7cbbae05e0a5b76012029f901ad838e5be88c313647aa2429900cf96807c9a9c67a96e42f557383ed7793c850a10da827f466bd0a34d48d49f6e588fd529d399902a2d76d70c0d9544e89a341c9e35c7ed0392a7e20372e77676880b0d2d6ba5f0a76831463ddb4ea00dcefeca24fddc3dd5fbffbb85c686f00fe5b267a6319fceb624871a4f70822c9c39f3413259d72d9350e6263f474f065f173c8a582b3c7f642cd0ab3cf1eb365446de8b94b1952d2d1a06a108369412e2cc38e755dc18ff1fd2e1e96ed5df084f8bd69128e5a08b70c31d68a269c873827db1f3c8606815ee653dfb078c111af49a15a1bf3ce4e6c9a377176ff46b95e69c3f4fdc6cf134e4cda7e8b3335e2337a82d47420318b08bcc1ae295830997b71d994e315b5f391be4cbed3d0cd5c0a1acf4aac7bee90ee9c1f62420328f0da48de3384263130eb337e987df227739386bbb3a99911a0f8bb325f870b4e7929727b4b0ae821604080aa266a8084ddbfecb3ba2f104dcba4c3ca53e3b9809f360d8b305f1c6b9f590d19be59b58e2e5f8de98032fb3551605b14b478b5404420c2db034e49955377d5d98028d82ee89a3917f2514e4084b5f9ce81ce892db3716313703af0293d477575044f0bf074fd0e9e1b607971a474f14ada833d04db2aa09025851b0f518601dccbfa530454dd066fe64c19bf49ea00f6d1118de7b3b255b06159805890d0b15037f40a93ea1aa3fa6485104845c6b2143699e283d646edc32d34ca0e47fe2aee3d2cea4be6471caad42d7238e18b5cab31f390a952a9b53d2eea2d337f2cb507506292e4b6d425e95c0ad2c2bdd3e5b667194fc13eb95f55d05cbf80ed6bd9094cbafd0c6e93128418de894419fc81c6f1d09eaa24eaa944cb73c8d6b85298f32fd76796f8230e5e2c4df7346ff606174e92d70f7503d88b3c2d7c9447f437c8858542099ecdd414a4f6aac8759ca25409c7575f96512ae9ead91b9d5b0b390e325f83733e80615fc5b018b3f69cf7613d60b77b01635825188e8a766d06bd62ffc18b6fde9eb9d4b34b229de886946430c06f537a5640cf05690fe1a59cb71bbaa020415d08204e69bc62d33b72811b60bb6d5bb216de227fc256a03a42e4d0bb23f7d308cf0446e5ab9ec2c5542ff17853c961740e222be75a33f387c7ef3c5baab4a248ac5b0f4912b86b900964268e4fa94c4310981ae722c9e600faae64419a5f21f4a93c33c9f09e3a899a2d873294eb8687e06ca7673e848cd5c839309ac29deab44fb9f3f1476259c55471fb3522f0687140f141e2427f382f9374ae8540ba5a92fbcf9c24c53f1d8cf336974f90c3bb2301391f1f8d280b190636c8be8a5c350f7314d5090b16e7421ec59cf1fbe012b93c1ba1bed21ba80d03a6b5baf2eed5ca8f4cd86813c3dbd6c81b71dba511cf909179bd230ce07615be60149d18ef57fda36e432043b994979f5b48da43cdd3b2c02b907969d5a01ab0e7955a7cbbd258b0b4f992f943fb152b9dbf53f838c2fdb96f29dc00baf058c730fbfbcb681e3e7a7e0877f1198ded98ceb04de9927864ae5ccc58d97b594c41699c2a88d38366e70b0ca0076b0fbcc31ee4fe241e2578d27c696883fee638b4785ab41cd0d1dda48b40d4d977760832736b242b6bf094697cd8ee2e7ad1867a5bc26dd817b74c973a5d4cb5153d0c1559ebb7d501f913f2419ff8e4561c79560c83424cad325e458551eda8d131f79acd38994d34711fb8c7d058c1d1cf49db11e5746992d845c78a37efa6168bae131af54891f263e9931a88f5d4a80bd01e80a0f71daea09d64a62eb3cdd55612b80269dbf46875a9188d591c4bd1049fc0ad9d985dc6fc64142fe140821ddc3d1212250601e7bd45a0e5cd781d6fb101c29e8d80df580761a79e2274feae9376ed2b61bc5b2ed2648f49737177d2cf1aa4a489507e2aff7084ecc678cbaca6cbdd6cca5787e4859a35198adef6b7a552a193da08e5f726f48d2962150756b44a68a5f0be7d7e54e00fd062ab18dd0f4df76ecf15e8ddb49cef78c5fb969a1aeaeaa0da0207146ac7d4b2217006ab2627ba799b7616f706a250261b90872edfb6a6ed3f183dd33512baecfc907235a70a20cb57fb3737e8b0c9acc927bb2ba723bbd6571874c2042947096c8a6ede462f22b1904602fc855fa93f4f5e34e2250f16a5c041cad8d1b1d673c5bbebd8ee5c5970b0f4282967f8cdfd965423232323656d9f89887070287fb5deb36c3a2adfe3d7dd17f4e7a24c92795dd13be936791d347a3292aee8a8eb64b13f5574b441e6f1c87aaba31c75d2c279c72b0c7a5e65ed8edd1e51ddbfac1566205e6bc757a362b747036a3d464f2eac7412f1dcd0e050f7c241b8e4d063b6f572cff7af8b7b54a1bc268bbccf5e184863c496ba981cb7bca8b8513262f9bbc19f66efd66c4476cb62d59a8b41d2e15238eb1657e9469f77cf943c7fd92eb99eaf9f7d57842f01914bf90fa0d9ae0bc1d617f84dd97d9bff836737cc423d929ae7a29ca2217f7e342f302c0e9b5", 0x1000}) (async) 06:28:02 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="088000000000fcdbdf250d00000008000d0001000000ada1b026461bb5e784d70a48c9ac29ac07a1a91e67d1e5dc0609b6935ee7a4c79b21e017d3c8652a7dcf33f8c2ca1158a8ccb387cccd7d4cb800c088023daa4a1d3090fa"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="20000010", @ANYRES16=r2, @ANYBLOB="55ea00000000000000001f0000000a0001007770616e30000000"], 0x20}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r4, 0x0, 0x4000001) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan4\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r3, 0x700, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000) 06:28:02 executing program 1: syz_clone(0x90028000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x200000, &(0x7f0000000000)="2607b78f448a9f3cadfac984a15001f0bea1", 0x12, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="a7a9722fdd04a00becf0b9fe9662b756f65c58fd88c1d371a81b6ff0199b343afb5c8a395a13b533f7c850bc8ab4767ec9105f5b539cc2fa87bd5e199096a222558d98484442f17d4336cd174586e9a43da901f8f043111827da907b97fd61793a5d87ee6021732f9763e30e4d8189a6623c34b3dd2858f11ef913c85978a93fa95e334b30fe2a98be9802ed089f8fc9a3043a6f5f57384efc3233bcd2384a7f7f16cc5b41") ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000180)) read$rfkill(0xffffffffffffffff, &(0x7f00000001c0), 0x8) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xa25e]}, &(0x7f0000000240), 0x8) 06:28:02 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="088000000000fcdbdf250d00000008000d0001000000ada1b026461bb5e784d70a48c9ac29ac07a1a91e67d1e5dc0609b6935ee7a4c79b21e017d3c8652a7dcf33f8c2ca1158a8ccb387cccd7d4cb800c088023daa4a1d3090fa"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) (async) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="20000010", @ANYRES16=r2, @ANYBLOB="55ea00000000000000001f0000000a0001007770616e30000000"], 0x20}}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r4, 0x0, 0x4000001) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r3, 0x700, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x40000) 06:28:02 executing program 2: syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace$setregset(0x4205, 0x0, 0x3, &(0x7f0000000040)={&(0x7f0000000000)='@', 0x1}) 06:28:02 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="550900010000000000001f000000a50601007770606e32000000"], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) 06:28:02 executing program 1: syz_clone(0x90028000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x200000, &(0x7f0000000000)="2607b78f448a9f3cadfac984a15001f0bea1", 0x12, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="a7a9722fdd04a00becf0b9fe9662b756f65c58fd88c1d371a81b6ff0199b343afb5c8a395a13b533f7c850bc8ab4767ec9105f5b539cc2fa87bd5e199096a222558d98484442f17d4336cd174586e9a43da901f8f043111827da907b97fd61793a5d87ee6021732f9763e30e4d8189a6623c34b3dd2858f11ef913c85978a93fa95e334b30fe2a98be9802ed089f8fc9a3043a6f5f57384efc3233bcd2384a7f7f16cc5b41") ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000180)) read$rfkill(0xffffffffffffffff, &(0x7f00000001c0), 0x8) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xa25e]}, &(0x7f0000000240), 0x8) 06:28:02 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000140)={r1, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0]}) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) 06:28:02 executing program 3: syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0) 06:28:02 executing program 4: r0 = syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r2, 0x9d27, 0x0, 0x0) (async) ptrace$getsig(0x4202, r2, 0x0, &(0x7f0000001080)) (async) migrate_pages(r1, 0x9d27, 0x0, 0x0) ptrace$peek(0x2, r0, &(0x7f0000001040)) (async) ptrace$setregset(0x4205, r1, 0x4, &(0x7f0000001000)={&(0x7f0000000000)="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", 0x1000}) [ 1062.179080][ T5300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1062.186241][ T5298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1062.191190][ T5301] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1062.201424][ T5302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:02 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:02 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="550900010000000000001f000000a50601007770606e32000000"], 0x20}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) 06:28:02 executing program 2: socket$inet_sctp(0x2, 0x5, 0x84) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:02 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1062.383766][ T5323] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 06:28:03 executing program 2: socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$inet_sctp(0x2, 0x5, 0x84) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:03 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 06:28:03 executing program 3: syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0) 06:28:03 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0), &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x2, 0x0, 0x9}) r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0xf767, 0x20000) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000200)={0x0, 0x6ca5729f4391f23a, 0x3dfd, 0x5, &(0x7f00000001c0)=[{0x20, 0x7f, 0x1ff, 0x2}, {0x1, 0x1, 0xea, 0x81}, {0xfffa, 0x4, 0xfffe, 0x1ff}, {0x4, 0x81, 0x7, 0x9}, {0x509d, 0x6c87, 0x7fff, 0x100}]}) 06:28:03 executing program 1: syz_clone(0x90028000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x200000, &(0x7f0000000000)="2607b78f448a9f3cadfac984a15001f0bea1", 0x12, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="a7a9722fdd04a00becf0b9fe9662b756f65c58fd88c1d371a81b6ff0199b343afb5c8a395a13b533f7c850bc8ab4767ec9105f5b539cc2fa87bd5e199096a222558d98484442f17d4336cd174586e9a43da901f8f043111827da907b97fd61793a5d87ee6021732f9763e30e4d8189a6623c34b3dd2858f11ef913c85978a93fa95e334b30fe2a98be9802ed089f8fc9a3043a6f5f57384efc3233bcd2384a7f7f16cc5b41") ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000180)) read$rfkill(0xffffffffffffffff, &(0x7f00000001c0), 0x8) [ 1062.535942][ T5337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:03 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="550900010000000000001f000000a50601007770606e32000000"], 0x20}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) [ 1062.584416][ T5343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1062.597236][ T5345] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 06:28:03 executing program 4: sched_rr_get_interval(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x7f, 0x0, 0x4000000000081, 0x0, 0x5}, 0x0, 0x0, &(0x7f00000001c0)={0x0, r0+10000000}, &(0x7f0000000240)={&(0x7f0000000200)={[0x4]}, 0x8}) syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:03 executing program 2: socket$inet_sctp(0x2, 0x5, 0x84) (async) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:03 executing program 2: r0 = syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) getpgid(r0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x40001) 06:28:03 executing program 4: sched_rr_get_interval(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x7f, 0x0, 0x4000000000081, 0x0, 0x5}, 0x0, 0x0, &(0x7f00000001c0)={0x0, r0+10000000}, &(0x7f0000000240)={&(0x7f0000000200)={[0x4]}, 0x8}) (async) syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r2, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) 06:28:03 executing program 2: r0 = syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) getpgid(r0) (async) getpgid(r0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x40001) 06:28:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r2, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) 06:28:03 executing program 2: r0 = syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) getpgid(r0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x40001) 06:28:03 executing program 3: syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0) 06:28:03 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0), &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x2, 0x0, 0x9}) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0xf767, 0x20000) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000200)={0x0, 0x6ca5729f4391f23a, 0x3dfd, 0x5, &(0x7f00000001c0)=[{0x20, 0x7f, 0x1ff, 0x2}, {0x1, 0x1, 0xea, 0x81}, {0xfffa, 0x4, 0xfffe, 0x1ff}, {0x4, 0x81, 0x7, 0x9}, {0x509d, 0x6c87, 0x7fff, 0x100}]}) 06:28:03 executing program 1: syz_clone(0x90028000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x200000, &(0x7f0000000000)="2607b78f448a9f3cadfac984a15001f0bea1", 0x12, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="a7a9722fdd04a00becf0b9fe9662b756f65c58fd88c1d371a81b6ff0199b343afb5c8a395a13b533f7c850bc8ab4767ec9105f5b539cc2fa87bd5e199096a222558d98484442f17d4336cd174586e9a43da901f8f043111827da907b97fd61793a5d87ee6021732f9763e30e4d8189a6623c34b3dd2858f11ef913c85978a93fa95e334b30fe2a98be9802ed089f8fc9a3043a6f5f57384efc3233bcd2384a7f7f16cc5b41") ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000180)) 06:28:03 executing program 4: sched_rr_get_interval(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x7f, 0x0, 0x4000000000081, 0x0, 0x5}, 0x0, 0x0, &(0x7f00000001c0)={0x0, r0+10000000}, &(0x7f0000000240)={&(0x7f0000000200)={[0x4]}, 0x8}) (async) pselect6(0x40, &(0x7f00000000c0)={0x7f, 0x0, 0x4000000000081, 0x0, 0x5}, 0x0, 0x0, &(0x7f00000001c0)={0x0, r0+10000000}, &(0x7f0000000240)={&(0x7f0000000200)={[0x4]}, 0x8}) syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1062.946522][ T5384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1062.973898][ T466] Bluetooth: hci2: command 0x0419 tx timeout [ 1062.990347][ T5390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:03 executing program 4: syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() ptrace$getsig(0x4202, r0, 0x3, &(0x7f0000000000)) 06:28:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r2, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) 06:28:03 executing program 4: syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() ptrace$getsig(0x4202, r0, 0x3, &(0x7f0000000000)) 06:28:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r3, 0x21, 0x0, 0x0, 0x0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r3, @ANYRES16=r2, @ANYRES8=r0], 0x20}, 0x1, 0x0, 0x0, 0x8811}, 0x24020011) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, r4, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x555c}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c094) 06:28:03 executing program 4: syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() ptrace$getsig(0x4202, r0, 0x3, &(0x7f0000000000)) 06:28:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) (async) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r3, 0x21, 0x0, 0x0, 0x0) (async) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r3, @ANYRES16=r2, @ANYRES8=r0], 0x20}, 0x1, 0x0, 0x0, 0x8811}, 0x24020011) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, r4, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x555c}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c094) 06:28:03 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f0000000140)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xa, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x3}, @from_mac=@broadcast, @broadcast, @device_b, {0x9, 0x7f}}, {0x1, 0x1, 0x3}}, {@type10={{0x0, 0x2, 0xc, 0x1, 0x0, 0x0, 0x1}, {}, @from_mac, @broadcast, @from_mac, {0x3, 0x7f}}, {0x7, 0x1, 0x2, 0x1, 0xf6}}}, @ver_80211n={0x0, 0x20, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}}, @a_msdu=[{@device_a, @device_a, 0x9f, "191a7731883f998ba414d8092ddcb15d2b56f08dde0948a2997598b664e64c8af213fc8770f5f5762c36318dbd441a29a73a2a8aa776c09cce22923a824f1e42e9c4522a08e42e4bfc90ca85b2c11c3e416c19ce0f4ab767c356f1e9d1b32f6e4577c8961be135dfb91dc938c2affc2908c630faf4172435fc44bb72b77474f4028d254ea257869a95ce07e6ce65093a44338a9ccb983052af90388bae76d3"}, {@broadcast, @device_a, 0x10, "15893ccc03c43ee284a692f34189ee69"}, {@broadcast, @device_b, 0xf0, "5cbebfa6df58fdaf47943842c382309a9468cf14f0d8b236536729731661cbd67e9e6abc731c8bb399d3c9a584bc1057b353493137079273091882aafc84c8cf2702de5f8af23301fc3e15f888f2382f6fdbd9a14b003fbb4d53a127075d924bdc4e0f2e786a4aa104ee8a9fc71d223805eaeb68a626f3baec5107f477e2f750f1418182b7698aaf4bf6d388bd21c472d5ffad80c2d08a174981f4128901dde6cfa2a75b7aba0f2b6917db2962235841bd826df07623f6ac4fbdd9e2fd94a4a2d6bd1e1721c3cc47686962f95f0888036249994d9b9f990cbfe2a7f7d7234a32e6129b5187dd7a476bae4333a37aa967"}]}, 0x208) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000100)=@ctrl_frame=@bar={{}, {0x2}, @broadcast, @device_a, @compressed={{0x1, 0x0, 0x1, 0x0, 0x1}, {0x0, 0x8}}}, 0x14) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) [ 1063.321500][ T5429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1063.343498][ T5429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1063.363521][ T5429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:04 executing program 2: syz_clone(0xab149080, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:04 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0), &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x2, 0x0, 0x9}) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0xf767, 0x20000) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000200)={0x0, 0x6ca5729f4391f23a, 0x3dfd, 0x5, &(0x7f00000001c0)=[{0x20, 0x7f, 0x1ff, 0x2}, {0x1, 0x1, 0xea, 0x81}, {0xfffa, 0x4, 0xfffe, 0x1ff}, {0x4, 0x81, 0x7, 0x9}, {0x509d, 0x6c87, 0x7fff, 0x100}]}) 06:28:04 executing program 4: syz_clone(0x140980, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:04 executing program 1: syz_clone(0x90028000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x200000, &(0x7f0000000000)="2607b78f448a9f3cadfac984a15001f0bea1", 0x12, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="a7a9722fdd04a00becf0b9fe9662b756f65c58fd88c1d371a81b6ff0199b343afb5c8a395a13b533f7c850bc8ab4767ec9105f5b539cc2fa87bd5e199096a222558d98484442f17d4336cd174586e9a43da901f8f043111827da907b97fd61793a5d87ee6021732f9763e30e4d8189a6623c34b3dd2858f11ef913c85978a93fa95e334b30fe2a98be9802ed089f8fc9a3043a6f5f57384efc3233bcd2384a7f7f16cc5b41") 06:28:04 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) (async) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r3, 0x21, 0x0, 0x0, 0x0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r3, @ANYRES16=r2, @ANYRES8=r0], 0x20}, 0x1, 0x0, 0x0, 0x8811}, 0x24020011) (async) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, r4, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x555c}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c094) 06:28:04 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f0000000140)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xa, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x3}, @from_mac=@broadcast, @broadcast, @device_b, {0x9, 0x7f}}, {0x1, 0x1, 0x3}}, {@type10={{0x0, 0x2, 0xc, 0x1, 0x0, 0x0, 0x1}, {}, @from_mac, @broadcast, @from_mac, {0x3, 0x7f}}, {0x7, 0x1, 0x2, 0x1, 0xf6}}}, @ver_80211n={0x0, 0x20, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}}, @a_msdu=[{@device_a, @device_a, 0x9f, "191a7731883f998ba414d8092ddcb15d2b56f08dde0948a2997598b664e64c8af213fc8770f5f5762c36318dbd441a29a73a2a8aa776c09cce22923a824f1e42e9c4522a08e42e4bfc90ca85b2c11c3e416c19ce0f4ab767c356f1e9d1b32f6e4577c8961be135dfb91dc938c2affc2908c630faf4172435fc44bb72b77474f4028d254ea257869a95ce07e6ce65093a44338a9ccb983052af90388bae76d3"}, {@broadcast, @device_a, 0x10, "15893ccc03c43ee284a692f34189ee69"}, {@broadcast, @device_b, 0xf0, "5cbebfa6df58fdaf47943842c382309a9468cf14f0d8b236536729731661cbd67e9e6abc731c8bb399d3c9a584bc1057b353493137079273091882aafc84c8cf2702de5f8af23301fc3e15f888f2382f6fdbd9a14b003fbb4d53a127075d924bdc4e0f2e786a4aa104ee8a9fc71d223805eaeb68a626f3baec5107f477e2f750f1418182b7698aaf4bf6d388bd21c472d5ffad80c2d08a174981f4128901dde6cfa2a75b7aba0f2b6917db2962235841bd826df07623f6ac4fbdd9e2fd94a4a2d6bd1e1721c3cc47686962f95f0888036249994d9b9f990cbfe2a7f7d7234a32e6129b5187dd7a476bae4333a37aa967"}]}, 0x208) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000100)=@ctrl_frame=@bar={{}, {0x2}, @broadcast, @device_a, @compressed={{0x1, 0x0, 0x1, 0x0, 0x1}, {0x0, 0x8}}}, 0x14) (async) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) [ 1063.742884][ T5454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1063.762985][ T5458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1063.771759][ T5458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1063.808770][ T5458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:04 executing program 4: syz_clone(0x140980, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:04 executing program 4: syz_clone(0x140980, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:04 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x44, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000881}, 0x40000) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r5, 0x100, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) 06:28:04 executing program 4: r0 = syz_clone(0x88129000, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x3, &(0x7f0000000000)=0x1ff) 06:28:04 executing program 2: syz_clone(0xab149080, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:04 executing program 4: r0 = syz_clone(0x88129000, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x3, &(0x7f0000000000)=0x1ff) 06:28:04 executing program 2: syz_clone(0xab149080, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:04 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x44, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000881}, 0x40000) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r5, 0x100, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_RECONFIGURE(r2, 0x0, 0x0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) (async) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x44, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000881}, 0x40000) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) (async) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r5, 0x100, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) (async) 06:28:04 executing program 4: r0 = syz_clone(0x88129000, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x3, &(0x7f0000000000)=0x1ff) (async) sched_setscheduler(r0, 0x3, &(0x7f0000000000)=0x1ff) 06:28:04 executing program 2: syz_clone(0xc202e000, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:04 executing program 1: syz_clone(0x90028000, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:04 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f0000000140)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xa, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x3}, @from_mac=@broadcast, @broadcast, @device_b, {0x9, 0x7f}}, {0x1, 0x1, 0x3}}, {@type10={{0x0, 0x2, 0xc, 0x1, 0x0, 0x0, 0x1}, {}, @from_mac, @broadcast, @from_mac, {0x3, 0x7f}}, {0x7, 0x1, 0x2, 0x1, 0xf6}}}, @ver_80211n={0x0, 0x20, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}}, @a_msdu=[{@device_a, @device_a, 0x9f, "191a7731883f998ba414d8092ddcb15d2b56f08dde0948a2997598b664e64c8af213fc8770f5f5762c36318dbd441a29a73a2a8aa776c09cce22923a824f1e42e9c4522a08e42e4bfc90ca85b2c11c3e416c19ce0f4ab767c356f1e9d1b32f6e4577c8961be135dfb91dc938c2affc2908c630faf4172435fc44bb72b77474f4028d254ea257869a95ce07e6ce65093a44338a9ccb983052af90388bae76d3"}, {@broadcast, @device_a, 0x10, "15893ccc03c43ee284a692f34189ee69"}, {@broadcast, @device_b, 0xf0, "5cbebfa6df58fdaf47943842c382309a9468cf14f0d8b236536729731661cbd67e9e6abc731c8bb399d3c9a584bc1057b353493137079273091882aafc84c8cf2702de5f8af23301fc3e15f888f2382f6fdbd9a14b003fbb4d53a127075d924bdc4e0f2e786a4aa104ee8a9fc71d223805eaeb68a626f3baec5107f477e2f750f1418182b7698aaf4bf6d388bd21c472d5ffad80c2d08a174981f4128901dde6cfa2a75b7aba0f2b6917db2962235841bd826df07623f6ac4fbdd9e2fd94a4a2d6bd1e1721c3cc47686962f95f0888036249994d9b9f990cbfe2a7f7d7234a32e6129b5187dd7a476bae4333a37aa967"}]}, 0x208) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000100)=@ctrl_frame=@bar={{}, {0x2}, @broadcast, @device_a, @compressed={{0x1, 0x0, 0x1, 0x0, 0x1}, {0x0, 0x8}}}, 0x14) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) 06:28:04 executing program 0: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, r1], 0xa}) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)={r1}) prctl$PR_SET_FPEMU(0xa, 0x0) 06:28:04 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x10000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8015}, 0x40c0) r2 = syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, r2, 0x0, 0x70bd2b, 0x0, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x20}}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r2, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @SEG6_ATTR_SECRET={0x18, 0x4, [0xffff0000, 0x9, 0xffffffff, 0x6, 0x20]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @local}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4040004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r3) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, r5, 0x200}, 0x14}}, 0x0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="000127bd7000fcdbdf251f0000000800020015db4b2e50112a6d87866dbadfe0f2fe2bd46e0c7298790fbd7f4da120b0e3d7cc38049a296ff92199249251364f2e9801ef43f1ebd2234cb4036d7f39e73bc3b8917d9d1b34f8684aa48e087f27bf21c15138f58c73524be452eb8e78eae09135312d2c8d6d13b37431f2747746b7ef77574d324ba482f17222e1fa83301b6670af6774dfdfa959a5640f7fe3df1419cc5211356933a9b50ca821bbc34517efe14fe7a3ff03615d523cb542fa0aae6c07fa2f9ac9f6ffffffffffffffdc9ac025c5f8f68ddfc10ea8765adb9f8e4ae3d4", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) syz_clone(0x203000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1064.188016][ T5497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1064.217840][ T5511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:04 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r2, 0x0, 0x0) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x44, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000881}, 0x40000) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r5, 0x100, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) [ 1064.227275][ T5512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:04 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x10000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8015}, 0x40c0) (async, rerun: 32) r2 = syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) (rerun: 32) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, r2, 0x0, 0x70bd2b, 0x0, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x20}}, 0x0) (async) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r2, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @SEG6_ATTR_SECRET={0x18, 0x4, [0xffff0000, 0x9, 0xffffffff, 0x6, 0x20]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @local}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4040004) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r3) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, r5, 0x200}, 0x14}}, 0x0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="000127bd7000fcdbdf251f0000000800020015db4b2e50112a6d87866dbadfe0f2fe2bd46e0c7298790fbd7f4da120b0e3d7cc38049a296ff92199249251364f2e9801ef43f1ebd2234cb4036d7f39e73bc3b8917d9d1b34f8684aa48e087f27bf21c15138f58c73524be452eb8e78eae09135312d2c8d6d13b37431f2747746b7ef77574d324ba482f17222e1fa83301b6670af6774dfdfa959a5640f7fe3df1419cc5211356933a9b50ca821bbc34517efe14fe7a3ff03615d523cb542fa0aae6c07fa2f9ac9f6ffffffffffffffdc9ac025c5f8f68ddfc10ea8765adb9f8e4ae3d4", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) syz_clone(0x203000, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:04 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:04 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r2, 0x21, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0125020000000c00080000000000000000002a000100000000000c000593f774e4440c0de102000500000000000000080001000000000008009651f6be00", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x48044) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r4, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) 06:28:04 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x10000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8015}, 0x40c0) r2 = syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, r2, 0x0, 0x70bd2b, 0x0, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x20}}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r2, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @SEG6_ATTR_SECRET={0x18, 0x4, [0xffff0000, 0x9, 0xffffffff, 0x6, 0x20]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @local}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4040004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r3) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, r5, 0x200}, 0x14}}, 0x0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="000127bd7000fcdbdf251f0000000800020015db4b2e50112a6d87866dbadfe0f2fe2bd46e0c7298790fbd7f4da120b0e3d7cc38049a296ff92199249251364f2e9801ef43f1ebd2234cb4036d7f39e73bc3b8917d9d1b34f8684aa48e087f27bf21c15138f58c73524be452eb8e78eae09135312d2c8d6d13b37431f2747746b7ef77574d324ba482f17222e1fa83301b6670af6774dfdfa959a5640f7fe3df1419cc5211356933a9b50ca821bbc34517efe14fe7a3ff03615d523cb542fa0aae6c07fa2f9ac9f6ffffffffffffffdc9ac025c5f8f68ddfc10ea8765adb9f8e4ae3d4", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) syz_clone(0x203000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000400), 0x80) (async) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x10000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8015}, 0x40c0) (async) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) (async) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, r2, 0x0, 0x70bd2b, 0x0, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x20}}, 0x0) (async) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r2, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @SEG6_ATTR_SECRET={0x18, 0x4, [0xffff0000, 0x9, 0xffffffff, 0x6, 0x20]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @local}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4040004) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r3) (async) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, r5, 0x200}, 0x14}}, 0x0) (async) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="000127bd7000fcdbdf251f0000000800020015db4b2e50112a6d87866dbadfe0f2fe2bd46e0c7298790fbd7f4da120b0e3d7cc38049a296ff92199249251364f2e9801ef43f1ebd2234cb4036d7f39e73bc3b8917d9d1b34f8684aa48e087f27bf21c15138f58c73524be452eb8e78eae09135312d2c8d6d13b37431f2747746b7ef77574d324ba482f17222e1fa83301b6670af6774dfdfa959a5640f7fe3df1419cc5211356933a9b50ca821bbc34517efe14fe7a3ff03615d523cb542fa0aae6c07fa2f9ac9f6ffffffffffffffdc9ac025c5f8f68ddfc10ea8765adb9f8e4ae3d4", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) (async) syz_clone(0x203000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 06:28:05 executing program 2: syz_clone(0xc202e000, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:05 executing program 0: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, r1], 0xa}) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)={r1}) (async) prctl$PR_SET_FPEMU(0xa, 0x0) 06:28:05 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400), 0x80) (async) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r2, 0x21, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0125020000000c00080000000000000000002a000100000000000c000593f774e4440c0de102000500000000000000080001000000000008009651f6be00", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x48044) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r4, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) (async) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r4, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) [ 1064.537018][ T5545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:05 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0xe88f9bb6) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)="64d887cee0320d9666e02f89b74e", 0xe}, 0x1, 0x0, 0x0, 0x400c000}, 0x10) 06:28:05 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x18}, 0x10) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)={0x30, r0, 0x200, 0x70bd2b, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x10) r1 = socket(0x1, 0x80004, 0x1) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xe9}]}, 0x48}, 0x1, 0x0, 0x0, 0x20}, 0x54) syz_clone(0x20880, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:05 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r2, 0x21, 0x0, 0x0, 0x0) (async, rerun: 64) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0125020000000c00080000000000000000002a000100000000000c000593f774e4440c0de102000500000000000000080001000000000008009651f6be00", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x48044) (rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r4, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) 06:28:05 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x18}, 0x10) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)={0x30, r0, 0x200, 0x70bd2b, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x10) r1 = socket(0x1, 0x80004, 0x1) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xe9}]}, 0x48}, 0x1, 0x0, 0x0, 0x20}, 0x54) syz_clone(0x20880, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x18}, 0x10) (async) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)={0x30, r0, 0x200, 0x70bd2b, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x10) (async) socket(0x1, 0x80004, 0x1) (async) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xe9}]}, 0x48}, 0x1, 0x0, 0x0, 0x20}, 0x54) (async) syz_clone(0x20880, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 06:28:05 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r2, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r0) 06:28:05 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x18}, 0x10) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)={0x30, r0, 0x200, 0x70bd2b, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x10) r1 = socket(0x1, 0x80004, 0x1) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xe9}]}, 0x48}, 0x1, 0x0, 0x0, 0x20}, 0x54) (async) syz_clone(0x20880, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:05 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:05 executing program 2: syz_clone(0xc202e000, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:05 executing program 4: syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:05 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r2, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r0) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r0) 06:28:05 executing program 0: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, r1], 0xa}) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, r1], 0xa}) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)={r1}) prctl$PR_SET_FPEMU(0xa, 0x0) 06:28:05 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0xe88f9bb6) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)="64d887cee0320d9666e02f89b74e", 0xe}, 0x1, 0x0, 0x0, 0x400c000}, 0x10) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0xe88f9bb6) (async) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)="64d887cee0320d9666e02f89b74e", 0xe}, 0x1, 0x0, 0x0, 0x400c000}, 0x10) (async) 06:28:05 executing program 4: syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1064.958960][ T5596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:05 executing program 4: syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 06:28:05 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r2, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r0) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r0) 06:28:05 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:05 executing program 4: syz_clone(0xa8009800, 0x0, 0x24, 0x0, 0x0, 0x0) 06:28:05 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x814) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r2, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) 06:28:05 executing program 2: sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x50) r0 = syz_clone(0x42068000, 0x0, 0x4a, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PID={0x8, 0x1c, r0}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x24000844) prctl$PR_SCHED_CORE(0x3e, 0x4, r0, 0x3, &(0x7f0000000000)) 06:28:05 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0xe88f9bb6) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)="64d887cee0320d9666e02f89b74e", 0xe}, 0x1, 0x0, 0x0, 0x400c000}, 0x10) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0xe88f9bb6) (async) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)="64d887cee0320d9666e02f89b74e", 0xe}, 0x1, 0x0, 0x0, 0x400c000}, 0x10) (async) 06:28:05 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) ioprio_get$uid(0x3, 0xee00) 06:28:05 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x814) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r2, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) (async) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x814) (async) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r2, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) (async) 06:28:05 executing program 4: syz_clone(0xa8009800, 0x0, 0x24, 0x0, 0x0, 0x0) syz_clone(0xa8009800, 0x0, 0x24, 0x0, 0x0, 0x0) (async) [ 1065.334828][ T5626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:05 executing program 4: syz_clone(0xa8009800, 0x0, 0x24, 0x0, 0x0, 0x0) syz_clone(0xa8009800, 0x0, 0x24, 0x0, 0x0, 0x0) (async) 06:28:05 executing program 1: syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r3, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r3, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb0, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4c}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8018}, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0xf, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x9}, @device_b}, {0x0, 0x0, 0x3}}, {@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1}, {0x1}, @broadcast, @broadcast, @initial, {0x2, 0x2}}, {0x7, 0x1, 0x3}}}, @a_msdu=[{@device_a, @device_a, 0xc9, "32dfc29aa5facc209497d6383c14b3e4067cf85b8be0927e7d43f7f2cae9e18b15b62174eeb4e07d92cfd3b3418dce1c628fa937cf661b7e5103fc0c127bc372617c7b122fc28a44a75f457e9c5ee8f98eb416f94996cdceb3cd6e46b3730840ec14c98d36a766146981712019975e42f7702a311990241546afda4937cde2b9e48f15b06a50b73bf4be2dfd441a8c1084f663aedd2eb1ac257100885f83ccd17256d2f362aa1165c361859095c8f7d72e2b099645f78f99617a2cd9817b5e77651be08199220e84cf"}]}, 0x10c) 06:28:05 executing program 4: r0 = syz_clone(0x280c8000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$poke(0x4, r0, &(0x7f0000000000), 0x1) 06:28:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x814) (async) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r2, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) 06:28:06 executing program 4: r0 = syz_clone(0x280c8000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$poke(0x4, r0, &(0x7f0000000000), 0x1) 06:28:06 executing program 2: sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x50) (async) r0 = syz_clone(0x42068000, 0x0, 0x4a, 0x0, 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r1) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PID={0x8, 0x1c, r0}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x24000844) (async) prctl$PR_SCHED_CORE(0x3e, 0x4, r0, 0x3, &(0x7f0000000000)) 06:28:06 executing program 4: r0 = syz_clone(0x280c8000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$poke(0x4, r0, &(0x7f0000000000), 0x1) syz_clone(0x280c8000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace$poke(0x4, r0, &(0x7f0000000000), 0x1) (async) 06:28:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$NET_DM_CMD_START(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r2, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) [ 1065.550857][ T5651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1065.581878][ T5651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$NET_DM_CMD_START(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async) sendmsg$NET_DM_CMD_START(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r2, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) 06:28:06 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) ioprio_get$uid(0x3, 0xee00) 06:28:06 executing program 3: syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000840)=ANY=[@ANYBLOB="981409000802110000010802110000000861e9a48f7a27006908c836ff00080211000000c55d6dc61ee7ea0b3e0058fb900095054198a6828a696d54d75aa59afa50edf9a1566e66318522e25ff0e7abac4d266e7c4a47110f38f160b94cffac5092108e9cf1f80a1dceee8290b299876994f49f45bccd0420381c4aef8d03132abc541fc0c2edffc5ae8c58a993788260eb404af2ad414233263d977387158fc86029183a88bbfdb651d50d465d9451656f168b64d8cc428f488f01307f64307b3fc0220e10d056481c37f830a211913e60823fce0849ed577aeb54a697bd02943dc1b8c5db8d792fbb015ab0cba5b1cfc4b11c55e732ccbcfab6fd457ccefa7e6facaa431d8db9f6f4d2df53fb738c0309f07da3c83f177cf288fe3c6420b1434cfb82c6eb6fd512784e75c11aa95727da9348ad56ac38c01e05500a4d8faa7148c466db8f33461c972850fccf32c9e42c370094f2dd4be179f1d02692936155135f4d6c68a701512eda814208a5021a169ad954949f8c2b94282a0d54c1fd5ff163d5d2535233e44fc1d39803ecbe321b77dc281eb92eed1e70b1a724ee171895dcdc1b2f8d272eddd0730ee30ca4db171a966ab2b247624a78b392ff6c38e946f52c7910fb54174400da41c17986f032306e2035234890399c585b51362553eae8730df4b0bc911c24cde5794ec678592e183cbbff6b44247eb5f27d6844a0584a2a5da5427a5f7f153dd983bfdf4bc5a41b309926efa39b844de987a78732f5c8c94e27d518fee30e80f421d7246d11266e69192770ea1b2125a390f21d1702aff7c31088f7a3c790f862e3078c831cde6131c4fb10cf7af5113a87f555eabf29a4c5f25fa46ac8da2c8eb47d9e9f556c5a451d8473000916122c068bddbea5a5d964c9897629133c7c5ab03e055f7c33a56d78d5dd9d52a4992d3e9ee70f201418329684eab41001d0a28ed09a643c81582662409c5f1f3e89c00e8f5c37eca6b78763bdcf1550cc09662b86d5cddde63ae846141b8c348ff06844d4a3434452f1300e34e8f61d9245ebd4d496109435da214f36e4e3ceb49754fb081726a17168a0f7b9b5bd1931c41287cfcdb4b7e4ae0229e8d1c3ee8145bc3eb33b1f0ce7b22c01f06e0cda94b5effa19e5e8b53596d297142d92e937b417b1246b622fc9eb4af693572bec76d1f14842c2e1c91f04def6dc45f15ac4d67431de86fc2dc6227fbf7ef105a25a480dad14f85fda3dcc6c0509dc96f3c61790ae65c0ea9bd83245b4f396eb4f7ed72dd55db3b851ee5330110149952e6346c9ea5aaf4d23e20f34a0bff174c5a2a068600882134720a90a10e26664a5e0276335f025aec38c70c1cd6392cb39a081926510a973d2c5fa4c26efe9643d7bda5e2729e5c630b2b88d3b79f96b4e0727f4550307bfba217b0fe93c220667ce396adaebec2cec71500aae7664c1b342c27a60a0e42e4038db1b523e1bff36cdc4c37ec0b814a9e35dbefe7e0015c3c8c20736c4a46e507a07e84f4980a8a832ef0726206dd0d028438a8254a549b6b61d2e66779cc4904705a74961d87baaa1694e598ce31a2bf37caa21703bc507979e593410294ba049f7bca6ae218c8af043d0b43547ee27a38bf3421d07bfa474ba3867d3d2d1110a414c6d25deb10c7421681ff375b66749b163b909a4112626c62ad177dccc2c8513d42fb18f6c6ad7dc285db5f2423cebe59b6ab44d2f3ed16edbe0d38f7a1b1dd28e4640649ce14ccd871d43ce4f18ab2ac3d59d18fca0bad58a9c2d8862fad51f316319164b10e73566923c1327d3d3531194d4f032073771c83a754f2c304598b34a4bd684003d03d00abdd8d0d5f8bf3ed922546ccc3f33ef4a548d95fae3cca3d31a0b34a5b43007dcda07e9c141ab161d38409d3bee1ec3dbbc310105ab4992c0663774fd4e0b19377d9e3e36f8e8fd60ff1ef2ad6eb4f01e27409affdaf6a692f23329474d54dc0d703036335375f8ac15bbfc213fdf3ee99a1dfc24be7623086fb0f0f7598b6c5cd335029bfd5437e0c450ca28dd656aaae2d53ed56c28a73ffffbffd6fc9bf708577309934f05d35320b732c6b3e48a3d5614cc7f0958eba5474b40f556621d40a1be2a534e628781dc2cb31bb979a3e4d1fb203d6bdc3bc51e324760e784c0e54c7bac440a09bff0548edceeb14f966f14505a487dde63f4fa3896132e9ba6b85f2312b9a0076517dd16102581cf68e1b431aa96cf44e62ec28792e7a69d5b182f1bbd48b271071dcc86593ccda8850be499c20a3c5194523f3ea76c7558f8aec8e91d7356b5f7092528eab6c0c96cba1bacdf7612133b3c7bff55bf713232b0d73bea7d5d99f5249308f7f209548ba1b1de80b03b3bc5422cbe632f1046055f566aee246748f877adb967a71487f2e4f998c54aa1a49e99b83ffa6c912cbff68dfd0132521649187bc502977455cf0832a313528a0bab8274ad4122098398bf85443c700afd9a08ad06efb4b08ecaf01373d034949bcfac5f8e38283d2199965a876369efcf95456a30586e26125537c118a83258de397180c0f8b3cbdaac4b62568d462e18481841297768820a7c7a48da3f308c2e4da67c79f85cf209edacb0034956c193198447be284cbd313a88a191159367e4d4213418964072333ac21e0c6d955d4ee569437246dfdd3d936dfef419630b0a0042dfaa2928ba91d42a92ec81d73651ec6c0f2fc7adab22103165a99ba0c25c5158fd82c9f9524dd321c2905870996efa095fae22b6b6b22ebe6f8237cebe329e049eb8abec6921814be63727fcdb29f8a93b4ba40c4feb51633f3968d767c783b7c03d71ce8002486d33dd8268fae72e0509b99dfe49401deb9e25160ecd89cc7b94fd2ab6168ea7cc7b6b985dcf92960e9540690654091e1badabcaabf7372b315928b287ab98551803602fd6969e19be8f63821fcdcb9f4b1d39722d8d9313b029d33094b2d595eebea8d041b532fc5838b68e1f0fd07e1686034ed61f9d26d528af1106489008a34f127954ea73c142"], 0x785) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {0x240}, @device_b, @device_a, @initial, {0xd, 0x1}}, 0x4a25, 0x11, @random=0x3ff, @val={0x1, 0x7, [{0x16, 0x1}, {0x30, 0x1}, {0x9}, {0x36}, {0x4, 0x1}, {0x4, 0x1}, {0x18, 0x1}]}, @val={0x2d, 0x1a, {0x80, 0x0, 0x4, 0x0, {0x80000, 0x7, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x3000000, 0x3}}, [{0xdd, 0x6, "0b3a3085c841"}, {0xdd, 0x64, "fc462226b5d79eab802efed69855e9a8c4d1223d5305a69fbf8203bcda840a1942077ff7fe3ecdd14139e9b8189e57514cc2b4e5cf228ca59444e535a0c76e0d708ca46cd71b3eb78e1ccd137253502cc976ae8e6a3a216b00032af85ae80a810a13ac3e"}]}, 0xb1) 06:28:06 executing program 4: r0 = syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x2, &(0x7f0000000000)) 06:28:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$NET_DM_CMD_START(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r2, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) [ 1065.707143][ T5672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1065.715377][ T5673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1065.735040][ T5672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1065.741301][ T5672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:06 executing program 1: syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r3, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r3, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb0, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4c}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8018}, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0xf, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x9}, @device_b}, {0x0, 0x0, 0x3}}, {@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1}, {0x1}, @broadcast, @broadcast, @initial, {0x2, 0x2}}, {0x7, 0x1, 0x3}}}, @a_msdu=[{@device_a, @device_a, 0xc9, "32dfc29aa5facc209497d6383c14b3e4067cf85b8be0927e7d43f7f2cae9e18b15b62174eeb4e07d92cfd3b3418dce1c628fa937cf661b7e5103fc0c127bc372617c7b122fc28a44a75f457e9c5ee8f98eb416f94996cdceb3cd6e46b3730840ec14c98d36a766146981712019975e42f7702a311990241546afda4937cde2b9e48f15b06a50b73bf4be2dfd441a8c1084f663aedd2eb1ac257100885f83ccd17256d2f362aa1165c361859095c8f7d72e2b099645f78f99617a2cd9817b5e77651be08199220e84cf"}]}, 0x10c) 06:28:06 executing program 4: r0 = syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x2, &(0x7f0000000000)) syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x2, &(0x7f0000000000)) (async) 06:28:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x60044880) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="20abbb3c", @ANYRES16=r2, @ANYBLOB="550900000000000000001f0000000a0001007770616e30000000"], 0x20}}, 0x0) 06:28:06 executing program 2: sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x50) r0 = syz_clone(0x42068000, 0x0, 0x4a, 0x0, 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r1) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PID={0x8, 0x1c, r0}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x24000844) (async) prctl$PR_SCHED_CORE(0x3e, 0x4, r0, 0x3, &(0x7f0000000000)) [ 1066.012488][ T5685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1066.024749][ T5685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:06 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) ioprio_get$uid(0x3, 0xee00) 06:28:06 executing program 3: syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000840)=ANY=[@ANYBLOB="981409000802110000010802110000000861e9a48f7a27006908c836ff00080211000000c55d6dc61ee7ea0b3e0058fb900095054198a6828a696d54d75aa59afa50edf9a1566e66318522e25ff0e7abac4d266e7c4a47110f38f160b94cffac5092108e9cf1f80a1dceee8290b299876994f49f45bccd0420381c4aef8d03132abc541fc0c2edffc5ae8c58a993788260eb404af2ad414233263d977387158fc86029183a88bbfdb651d50d465d9451656f168b64d8cc428f488f01307f64307b3fc0220e10d056481c37f830a211913e60823fce0849ed577aeb54a697bd02943dc1b8c5db8d792fbb015ab0cba5b1cfc4b11c55e732ccbcfab6fd457ccefa7e6facaa431d8db9f6f4d2df53fb738c0309f07da3c83f177cf288fe3c6420b1434cfb82c6eb6fd512784e75c11aa95727da9348ad56ac38c01e05500a4d8faa7148c466db8f33461c972850fccf32c9e42c370094f2dd4be179f1d02692936155135f4d6c68a701512eda814208a5021a169ad954949f8c2b94282a0d54c1fd5ff163d5d2535233e44fc1d39803ecbe321b77dc281eb92eed1e70b1a724ee171895dcdc1b2f8d272eddd0730ee30ca4db171a966ab2b247624a78b392ff6c38e946f52c7910fb54174400da41c17986f032306e2035234890399c585b51362553eae8730df4b0bc911c24cde5794ec678592e183cbbff6b44247eb5f27d6844a0584a2a5da5427a5f7f153dd983bfdf4bc5a41b309926efa39b844de987a78732f5c8c94e27d518fee30e80f421d7246d11266e69192770ea1b2125a390f21d1702aff7c31088f7a3c790f862e3078c831cde6131c4fb10cf7af5113a87f555eabf29a4c5f25fa46ac8da2c8eb47d9e9f556c5a451d8473000916122c068bddbea5a5d964c9897629133c7c5ab03e055f7c33a56d78d5dd9d52a4992d3e9ee70f201418329684eab41001d0a28ed09a643c81582662409c5f1f3e89c00e8f5c37eca6b78763bdcf1550cc09662b86d5cddde63ae846141b8c348ff06844d4a3434452f1300e34e8f61d9245ebd4d496109435da214f36e4e3ceb49754fb081726a17168a0f7b9b5bd1931c41287cfcdb4b7e4ae0229e8d1c3ee8145bc3eb33b1f0ce7b22c01f06e0cda94b5effa19e5e8b53596d297142d92e937b417b1246b622fc9eb4af693572bec76d1f14842c2e1c91f04def6dc45f15ac4d67431de86fc2dc6227fbf7ef105a25a480dad14f85fda3dcc6c0509dc96f3c61790ae65c0ea9bd83245b4f396eb4f7ed72dd55db3b851ee5330110149952e6346c9ea5aaf4d23e20f34a0bff174c5a2a068600882134720a90a10e26664a5e0276335f025aec38c70c1cd6392cb39a081926510a973d2c5fa4c26efe9643d7bda5e2729e5c630b2b88d3b79f96b4e0727f4550307bfba217b0fe93c220667ce396adaebec2cec71500aae7664c1b342c27a60a0e42e4038db1b523e1bff36cdc4c37ec0b814a9e35dbefe7e0015c3c8c20736c4a46e507a07e84f4980a8a832ef0726206dd0d028438a8254a549b6b61d2e66779cc4904705a74961d87baaa1694e598ce31a2bf37caa21703bc507979e593410294ba049f7bca6ae218c8af043d0b43547ee27a38bf3421d07bfa474ba3867d3d2d1110a414c6d25deb10c7421681ff375b66749b163b909a4112626c62ad177dccc2c8513d42fb18f6c6ad7dc285db5f2423cebe59b6ab44d2f3ed16edbe0d38f7a1b1dd28e4640649ce14ccd871d43ce4f18ab2ac3d59d18fca0bad58a9c2d8862fad51f316319164b10e73566923c1327d3d3531194d4f032073771c83a754f2c304598b34a4bd684003d03d00abdd8d0d5f8bf3ed922546ccc3f33ef4a548d95fae3cca3d31a0b34a5b43007dcda07e9c141ab161d38409d3bee1ec3dbbc310105ab4992c0663774fd4e0b19377d9e3e36f8e8fd60ff1ef2ad6eb4f01e27409affdaf6a692f23329474d54dc0d703036335375f8ac15bbfc213fdf3ee99a1dfc24be7623086fb0f0f7598b6c5cd335029bfd5437e0c450ca28dd656aaae2d53ed56c28a73ffffbffd6fc9bf708577309934f05d35320b732c6b3e48a3d5614cc7f0958eba5474b40f556621d40a1be2a534e628781dc2cb31bb979a3e4d1fb203d6bdc3bc51e324760e784c0e54c7bac440a09bff0548edceeb14f966f14505a487dde63f4fa3896132e9ba6b85f2312b9a0076517dd16102581cf68e1b431aa96cf44e62ec28792e7a69d5b182f1bbd48b271071dcc86593ccda8850be499c20a3c5194523f3ea76c7558f8aec8e91d7356b5f7092528eab6c0c96cba1bacdf7612133b3c7bff55bf713232b0d73bea7d5d99f5249308f7f209548ba1b1de80b03b3bc5422cbe632f1046055f566aee246748f877adb967a71487f2e4f998c54aa1a49e99b83ffa6c912cbff68dfd0132521649187bc502977455cf0832a313528a0bab8274ad4122098398bf85443c700afd9a08ad06efb4b08ecaf01373d034949bcfac5f8e38283d2199965a876369efcf95456a30586e26125537c118a83258de397180c0f8b3cbdaac4b62568d462e18481841297768820a7c7a48da3f308c2e4da67c79f85cf209edacb0034956c193198447be284cbd313a88a191159367e4d4213418964072333ac21e0c6d955d4ee569437246dfdd3d936dfef419630b0a0042dfaa2928ba91d42a92ec81d73651ec6c0f2fc7adab22103165a99ba0c25c5158fd82c9f9524dd321c2905870996efa095fae22b6b6b22ebe6f8237cebe329e049eb8abec6921814be63727fcdb29f8a93b4ba40c4feb51633f3968d767c783b7c03d71ce8002486d33dd8268fae72e0509b99dfe49401deb9e25160ecd89cc7b94fd2ab6168ea7cc7b6b985dcf92960e9540690654091e1badabcaabf7372b315928b287ab98551803602fd6969e19be8f63821fcdcb9f4b1d39722d8d9313b029d33094b2d595eebea8d041b532fc5838b68e1f0fd07e1686034ed61f9d26d528af1106489008a34f127954ea73c142"], 0x785) (async) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {0x240}, @device_b, @device_a, @initial, {0xd, 0x1}}, 0x4a25, 0x11, @random=0x3ff, @val={0x1, 0x7, [{0x16, 0x1}, {0x30, 0x1}, {0x9}, {0x36}, {0x4, 0x1}, {0x4, 0x1}, {0x18, 0x1}]}, @val={0x2d, 0x1a, {0x80, 0x0, 0x4, 0x0, {0x80000, 0x7, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x3000000, 0x3}}, [{0xdd, 0x6, "0b3a3085c841"}, {0xdd, 0x64, "fc462226b5d79eab802efed69855e9a8c4d1223d5305a69fbf8203bcda840a1942077ff7fe3ecdd14139e9b8189e57514cc2b4e5cf228ca59444e535a0c76e0d708ca46cd71b3eb78e1ccd137253502cc976ae8e6a3a216b00032af85ae80a810a13ac3e"}]}, 0xb1) [ 1066.064350][ T5691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x60044880) (async) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="20abbb3c", @ANYRES16=r2, @ANYBLOB="550900000000000000001f0000000a0001007770616e30000000"], 0x20}}, 0x0) 06:28:06 executing program 4: r0 = syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x2, &(0x7f0000000000)) syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x2, &(0x7f0000000000)) (async) [ 1066.148362][ T5699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1066.160940][ T5700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x60044880) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="20abbb3c", @ANYRES16=r2, @ANYBLOB="550900000000000000001f0000000a0001007770616e30000000"], 0x20}}, 0x0) 06:28:06 executing program 2: syz_clone(0xa0028000, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:06 executing program 4: r0 = getuid() syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) ioprio_get$uid(0x3, r0) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000000)) 06:28:06 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000180)={0x0, r0, 0x7, 0xc2, 0x4}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r3, 0x21, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000340)={0x0, 0x0, r3}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) r5 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x5, 0x10140) ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, &(0x7f0000000200)={0x2, 0x0, 0x2, 0x80000001, 0xfffff801, 0x4125, 0x1, 0xffffffff, 0xe66}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100), r6) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x1c, r4, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r7, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x81000022}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x8040) 06:28:07 executing program 1: syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r3, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r3, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb0, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4c}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8018}, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0xf, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x9}, @device_b}, {0x0, 0x0, 0x3}}, {@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1}, {0x1}, @broadcast, @broadcast, @initial, {0x2, 0x2}}, {0x7, 0x1, 0x3}}}, @a_msdu=[{@device_a, @device_a, 0xc9, "32dfc29aa5facc209497d6383c14b3e4067cf85b8be0927e7d43f7f2cae9e18b15b62174eeb4e07d92cfd3b3418dce1c628fa937cf661b7e5103fc0c127bc372617c7b122fc28a44a75f457e9c5ee8f98eb416f94996cdceb3cd6e46b3730840ec14c98d36a766146981712019975e42f7702a311990241546afda4937cde2b9e48f15b06a50b73bf4be2dfd441a8c1084f663aedd2eb1ac257100885f83ccd17256d2f362aa1165c361859095c8f7d72e2b099645f78f99617a2cd9817b5e77651be08199220e84cf"}]}, 0x10c) 06:28:07 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@data_frame={@no_qos=@type00={{0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x1}, @device_a, @device_b, @random="f6c5f653e5c8", {0xf, 0x8}}, @random="42e9250e6be4b9403737f7b0d1c7cda15b5ad68a162d521c557bd6a56c07e13b68bc552ef6fe989fc9b05bfcfe9a13cfad66981d256c4f4d347abacb20a865870380927fcc02bbad8f077d0594b801f273cf018369bdc0d01bfd1b2ba5e506abff5e5e53de4b26e4e9a9d399a0a2d9d89ee7397e4b5a667f77e7ab426a8a0b01ddb2b027620c26702d175b7ef36948ab4ddb2be1d81eedab0579f56a0af4f3036209721eab6e62c14ae86df9f7f93201cddee803be279a909f01b91d05e205bbc4212e613dfeacf2dc63d1fb42531776cd1f197430c60c48ed609bc99f529aa11198b995f14214215a5e37a33a69f7aeb8841999205426e7aaeb271745f13518a01e3bba345d088ef807b186eacb94a7dbd8b035177edd9226e8a3acf852860bdce77f62fac44a87f6cfb7ffc0d23bbbaa9a58130931f68925fc488dc0d620aa99df60ea12f4c4e2842e484cd1194a31914a91bb3d2f17336d7fae7abc87917f2c2835564ccfc83c60285e3c00bbe3a12ff9e779e38b4d471b5ad17093ec4d585d79df4bd5a487aa55182ea9487bf5a1e109fa9b0174b3f64ec9860ec443e6457d9116a35b96554921d8d64ac02cb5423c32f2cd4c55ec40286318bc651b46be5cd3b5cea643e154d1aedf664a43a787e9a15d0cac1f0d4df7b944ebdca685cc6f7238fef77e079e64aaf06142daadae4aef6a21dc9ae4fb4917470a93916e78a5f1fe9302a893d6f3ea5feb751f3facf278e79a2e94ee684e30ae0de3c0922aa1401dfd0ba2cbd3b7ee4815aac768569bfec0fbca5ef7175de461c7fdaf9d20cd4885e5ca3222ed4f1c502e557fa2b1632ee4f91380b3ba72d69fa454fd8c8d1bb658fda0f7704f6b652f7f428a29edd902b34c849feb1db836cdcb43e2f74b5e8428dd777b2a17f77656d00aa6bbfabff59704b825f2bb2510e34e51ad02f9217488c69dbd2142fdcccf1bc7c53559157e1580601c6770463c037c2fc7d8b5a09b86d1197339d6eafcfcb85e3ff4e5a6955200290cc2583c7cf14af05544843a9ac9c019d28f3a64523837552451d3a89b54111ce4290d185a14fa5636de0fb7bc0e16903e5c2ee4b7103f04c6923b568df5bcba9d3832d8ad0764cd7adb03cd21d92499da86cacb202bf161fa375f4abab44ec418eab93452b7e76844697aee5493b13ddf80517694889b31f45d55a5e6e1a53af019cdd87633951f8b9842d09fe818561b0facc2245c8a70e9a56865cbeb6f7b7e8a97370e1128d2c89605d45965ad10ce26e1ec6f368d9d7f9da1e5b698310f6e055014400317a72b5055da20e0a9f87c0876e96d5cb4689cde9343b32fc6f6b5f18fc2ac468ca2594561824bd5614f"}, 0x3dd) 06:28:07 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000180)={0x0, r0, 0x7, 0xc2, 0x4}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r3, 0x21, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000340)={0x0, 0x0, r3}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) r5 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x5, 0x10140) ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, &(0x7f0000000200)={0x2, 0x0, 0x2, 0x80000001, 0xfffff801, 0x4125, 0x1, 0xffffffff, 0xe66}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100), r6) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x1c, r4, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r7, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x81000022}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x8040) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000180)={0x0, r0, 0x7, 0xc2, 0x4}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) pipe2$watch_queue(&(0x7f0000000400), 0x80) (async) setsockopt$inet6_dccp_buf(r3, 0x21, 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000340)={0x0, 0x0, r3}) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) (async) syz_open_dev$vcsa(&(0x7f00000001c0), 0x5, 0x10140) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, &(0x7f0000000200)={0x2, 0x0, 0x2, 0x80000001, 0xfffff801, 0x4125, 0x1, 0xffffffff, 0xe66}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100), r6) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) (async) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x1c, r4, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_RECONFIGURE(r7, 0x0, 0x0) (async) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x81000022}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x8040) (async) 06:28:07 executing program 2: syz_clone(0xa0028000, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:07 executing program 4: r0 = getuid() (async, rerun: 32) syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) (async) ioprio_get$uid(0x3, r0) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000000)) [ 1066.453638][ T5726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1066.470456][ T5726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:07 executing program 3: syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x785) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {0x240}, @device_b, @device_a, @initial, {0xd, 0x1}}, 0x4a25, 0x11, @random=0x3ff, @val={0x1, 0x7, [{0x16, 0x1}, {0x30, 0x1}, {0x9}, {0x36}, {0x4, 0x1}, {0x4, 0x1}, {0x18, 0x1}]}, @val={0x2d, 0x1a, {0x80, 0x0, 0x4, 0x0, {0x80000, 0x7, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x3000000, 0x3}}, [{0xdd, 0x6, "0b3a3085c841"}, {0xdd, 0x64, "fc462226b5d79eab802efed69855e9a8c4d1223d5305a69fbf8203bcda840a1942077ff7fe3ecdd14139e9b8189e57514cc2b4e5cf228ca59444e535a0c76e0d708ca46cd71b3eb78e1ccd137253502cc976ae8e6a3a216b00032af85ae80a810a13ac3e"}]}, 0xb1) [ 1066.496422][ T5729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1066.516663][ T5729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1066.534103][ T5743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1066.545606][ T5748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1066.559328][ T5743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:07 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000180)={0x0, r0, 0x7, 0xc2, 0x4}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r3, 0x21, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000340)={0x0, 0x0, r3}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) r5 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x5, 0x10140) ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, &(0x7f0000000200)={0x2, 0x0, 0x2, 0x80000001, 0xfffff801, 0x4125, 0x1, 0xffffffff, 0xe66}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100), r6) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x1c, r4, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r7, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x81000022}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x8040) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000180)={0x0, r0, 0x7, 0xc2, 0x4}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) pipe2$watch_queue(&(0x7f0000000400), 0x80) (async) setsockopt$inet6_dccp_buf(r3, 0x21, 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000340)={0x0, 0x0, r3}) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) (async) syz_open_dev$vcsa(&(0x7f00000001c0), 0x5, 0x10140) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, &(0x7f0000000200)={0x2, 0x0, 0x2, 0x80000001, 0xfffff801, 0x4125, 0x1, 0xffffffff, 0xe66}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100), r6) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) (async) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x1c, r4, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_RECONFIGURE(r7, 0x0, 0x0) (async) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x81000022}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x8040) (async) 06:28:07 executing program 2: syz_clone(0xa0028000, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r2, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r3, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r3) 06:28:07 executing program 2: syz_clone(0x80028100, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:07 executing program 2: syz_clone(0x80028100, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) (rerun: 32) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r2, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r3, 0x0, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r3) 06:28:07 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@data_frame={@no_qos=@type00={{0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x1}, @device_a, @device_b, @random="f6c5f653e5c8", {0xf, 0x8}}, @random="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"}, 0x3dd) 06:28:07 executing program 1: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@data_frame={@no_qos=@type00={{0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x1}, @device_a, @device_b, @random="f6c5f653e5c8", {0xf, 0x8}}, @random="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"}, 0x3dd) 06:28:07 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x0) [ 1066.914117][ T5800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:07 executing program 2: syz_clone(0x80028100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x80028100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) [ 1066.932744][ T5801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1066.935118][ T5800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1066.950201][ T5803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1066.960105][ T5803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:07 executing program 4: r0 = getuid() (async, rerun: 32) syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) ioprio_get$uid(0x3, r0) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000000)) 06:28:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r2, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r3, 0x0, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r3) 06:28:07 executing program 2: r0 = syz_clone(0x40000c00, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r1, 0x9d27, 0x0, 0x0) ptrace$peek(0x2, r1, &(0x7f0000000040)) r2 = getpid() r3 = getpgid(r2) ptrace$PTRACE_GETSIGMASK(0x420a, r3, 0x8, &(0x7f00000000c0)) rt_sigprocmask(0x0, &(0x7f0000000080)={[0xde]}, 0x0, 0x8) ptrace$poke(0x4, r0, &(0x7f0000000000), 0x80) 06:28:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="551500000000000000001f0000000a0001007770616e30000000"], 0x20}}, 0x0) 06:28:07 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@data_frame={@no_qos=@type00={{0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x1}, @device_a, @device_b, @random="f6c5f653e5c8", {0xf, 0x8}}, @random="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"}, 0x3dd) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@data_frame={@no_qos=@type00={{0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x1}, @device_a, @device_b, @random="f6c5f653e5c8", {0xf, 0x8}}, @random="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"}, 0x3dd) (async) 06:28:07 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x0) 06:28:07 executing program 1: syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r3, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r3, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb0, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4c}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8018}, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0xf, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x9}, @device_b}, {0x0, 0x0, 0x3}}, {@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1}, {0x1}, @broadcast, @broadcast, @initial, {0x2, 0x2}}, {0x7, 0x1, 0x3}}}, @a_msdu=[{@device_a, @device_a, 0xc9, "32dfc29aa5facc209497d6383c14b3e4067cf85b8be0927e7d43f7f2cae9e18b15b62174eeb4e07d92cfd3b3418dce1c628fa937cf661b7e5103fc0c127bc372617c7b122fc28a44a75f457e9c5ee8f98eb416f94996cdceb3cd6e46b3730840ec14c98d36a766146981712019975e42f7702a311990241546afda4937cde2b9e48f15b06a50b73bf4be2dfd441a8c1084f663aedd2eb1ac257100885f83ccd17256d2f362aa1165c361859095c8f7d72e2b099645f78f99617a2cd9817b5e77651be08199220e84cf"}]}, 0x10c) 06:28:07 executing program 2: r0 = syz_clone(0x40000c00, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r1, 0x9d27, 0x0, 0x0) ptrace$peek(0x2, r1, &(0x7f0000000040)) (async) r2 = getpid() r3 = getpgid(r2) ptrace$PTRACE_GETSIGMASK(0x420a, r3, 0x8, &(0x7f00000000c0)) (async, rerun: 64) rt_sigprocmask(0x0, &(0x7f0000000080)={[0xde]}, 0x0, 0x8) (async, rerun: 64) ptrace$poke(0x4, r0, &(0x7f0000000000), 0x80) [ 1067.312280][ T5839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1067.331644][ T5840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="551500000000000000001f0000000a0001007770616e30000000"], 0x20}}, 0x0) [ 1067.347575][ T5840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1067.349432][ T5841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1067.359197][ T5840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1067.390211][ T5841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:08 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="551500000000000000001f0000000a0001007770616e30000000"], 0x20}}, 0x0) 06:28:08 executing program 2: r0 = syz_clone(0x40000c00, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r1, 0x9d27, 0x0, 0x0) ptrace$peek(0x2, r1, &(0x7f0000000040)) (async) r2 = getpid() r3 = getpgid(r2) ptrace$PTRACE_GETSIGMASK(0x420a, r3, 0x8, &(0x7f00000000c0)) rt_sigprocmask(0x0, &(0x7f0000000080)={[0xde]}, 0x0, 0x8) (async, rerun: 32) ptrace$poke(0x4, r0, &(0x7f0000000000), 0x80) (rerun: 32) 06:28:08 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="550900006a6f3c0426af00000000"], 0x20}}, 0x0) 06:28:08 executing program 4: syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xa00000, &(0x7f00000000c0)="b16dc5b58e5b5f2396f4164387defb7dbfe64622f0791c9771918cd6efb741e9f47c4284aebada3b8446942d72aa7e4c20219e8957fe79b020c91413b6701955220ecfb987c32a7f46143b6e9987e4b664994c8d12c0ca42fbf56e36cfa269ab3799215fffde61dd145c1cdb298950be66aa92fca50e1d582409abf15d27394f951513a8786a5ceb7edafd89c0a656346b813215818aed3aed53639ba935007c7aaf76f1f3fad95e03cf3e5f78c498f4e2bd82d4acd99e98115d3d0bf05c0d4ba1838f9a7f1c10c9b5d5fbbcd8e61b0dbca259a5d3e4f063f606", 0xda, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="3e95f41a338b546b347e2c7533df7083f06b06b69b80d94f89ce6c8406ef050c171d19669fd238f6c61bc3fe69513a1446a29f3e6c9e2f34c0d525ce456bc25ec6f03be72ad6f8e3b9378b7dd3e03cefaced5a7d63a36f8fcf32352a2d5a1c29264e04") migrate_pages(r0, 0x9d27, 0x0, 0x0) ptrace$getenv(0x4201, r0, 0x8, &(0x7f0000000000)) migrate_pages(r0, 0x2, &(0x7f0000000040)=0x71c7f9b4, &(0x7f0000000080)=0x100) 06:28:08 executing program 2: syz_clone(0xf8bc1380, 0x0, 0xffffffffffffffdd, 0x0, 0x0, 0x0) 06:28:08 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="550900006a6f3c0426af00000000"], 0x20}}, 0x0) 06:28:08 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x0) 06:28:08 executing program 0: setfsuid(0xee01) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x0) 06:28:08 executing program 1: r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) accept4$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) accept$phonet_pipe(r4, &(0x7f0000000440), &(0x7f0000000480)=0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r6 = getpgid(0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r10) sendmsg$IEEE802154_LIST_IFACE(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r12, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r9, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r12, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x1001c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) setsockopt$inet6_dccp_buf(r8, 0x21, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r5, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0xe3c4e312bb2ad62d}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x801}, 0x40010) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30000000"], 0x20}}, 0x0) 06:28:08 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="550900006a6f3c0426af00000000"], 0x20}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="550900006a6f3c0426af00000000"], 0x20}}, 0x0) (async) [ 1068.100623][ T5904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1068.103516][ T5907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:08 executing program 2: syz_clone(0xf8bc1380, 0x0, 0xffffffffffffffdd, 0x0, 0x0, 0x0) syz_clone(0xf8bc1380, 0x0, 0xffffffffffffffdd, 0x0, 0x0, 0x0) (async) 06:28:08 executing program 2: syz_clone(0xf8bc1380, 0x0, 0xffffffffffffffdd, 0x0, 0x0, 0x0) 06:28:08 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r2, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004885}, 0x0) 06:28:08 executing program 2: r0 = syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x3, &(0x7f0000000000)=0x5, &(0x7f0000000040)=0x5) ptrace$poke(0x5, r0, &(0x7f0000000080), 0x1) 06:28:08 executing program 1: r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) accept4$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) accept$phonet_pipe(r4, &(0x7f0000000440), &(0x7f0000000480)=0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r6 = getpgid(0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r10) sendmsg$IEEE802154_LIST_IFACE(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r12, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r9, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r12, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x1001c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) setsockopt$inet6_dccp_buf(r8, 0x21, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r5, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0xe3c4e312bb2ad62d}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x801}, 0x40010) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30000000"], 0x20}}, 0x0) 06:28:08 executing program 4: syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0xa00000, &(0x7f00000000c0)="b16dc5b58e5b5f2396f4164387defb7dbfe64622f0791c9771918cd6efb741e9f47c4284aebada3b8446942d72aa7e4c20219e8957fe79b020c91413b6701955220ecfb987c32a7f46143b6e9987e4b664994c8d12c0ca42fbf56e36cfa269ab3799215fffde61dd145c1cdb298950be66aa92fca50e1d582409abf15d27394f951513a8786a5ceb7edafd89c0a656346b813215818aed3aed53639ba935007c7aaf76f1f3fad95e03cf3e5f78c498f4e2bd82d4acd99e98115d3d0bf05c0d4ba1838f9a7f1c10c9b5d5fbbcd8e61b0dbca259a5d3e4f063f606", 0xda, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="3e95f41a338b546b347e2c7533df7083f06b06b69b80d94f89ce6c8406ef050c171d19669fd238f6c61bc3fe69513a1446a29f3e6c9e2f34c0d525ce456bc25ec6f03be72ad6f8e3b9378b7dd3e03cefaced5a7d63a36f8fcf32352a2d5a1c29264e04") migrate_pages(r0, 0x9d27, 0x0, 0x0) (async) ptrace$getenv(0x4201, r0, 0x8, &(0x7f0000000000)) migrate_pages(r0, 0x2, &(0x7f0000000040)=0x71c7f9b4, &(0x7f0000000080)=0x100) 06:28:08 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r2, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004885}, 0x0) (async) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r2, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004885}, 0x0) 06:28:08 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r2, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004885}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) (async) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r2, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004885}, 0x0) (async) 06:28:08 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@ack={{}, {0x1}}, 0xa) 06:28:09 executing program 0: setfsuid(0xee01) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x0) 06:28:09 executing program 2: r0 = syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x3, &(0x7f0000000000)=0x5, &(0x7f0000000040)=0x5) (async) ptrace$poke(0x5, r0, &(0x7f0000000080), 0x1) [ 1068.467036][ T5948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1068.483969][ T5950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1068.491069][ T5948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:09 executing program 4: syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0xa00000, &(0x7f00000000c0)="b16dc5b58e5b5f2396f4164387defb7dbfe64622f0791c9771918cd6efb741e9f47c4284aebada3b8446942d72aa7e4c20219e8957fe79b020c91413b6701955220ecfb987c32a7f46143b6e9987e4b664994c8d12c0ca42fbf56e36cfa269ab3799215fffde61dd145c1cdb298950be66aa92fca50e1d582409abf15d27394f951513a8786a5ceb7edafd89c0a656346b813215818aed3aed53639ba935007c7aaf76f1f3fad95e03cf3e5f78c498f4e2bd82d4acd99e98115d3d0bf05c0d4ba1838f9a7f1c10c9b5d5fbbcd8e61b0dbca259a5d3e4f063f606", 0xda, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="3e95f41a338b546b347e2c7533df7083f06b06b69b80d94f89ce6c8406ef050c171d19669fd238f6c61bc3fe69513a1446a29f3e6c9e2f34c0d525ce456bc25ec6f03be72ad6f8e3b9378b7dd3e03cefaced5a7d63a36f8fcf32352a2d5a1c29264e04") migrate_pages(r0, 0x9d27, 0x0, 0x0) (async) ptrace$getenv(0x4201, r0, 0x8, &(0x7f0000000000)) migrate_pages(r0, 0x2, &(0x7f0000000040)=0x71c7f9b4, &(0x7f0000000080)=0x100) 06:28:09 executing program 1: r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) accept4$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) accept$phonet_pipe(r4, &(0x7f0000000440), &(0x7f0000000480)=0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r6 = getpgid(0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r10) sendmsg$IEEE802154_LIST_IFACE(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r12, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r9, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r12, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x1001c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) setsockopt$inet6_dccp_buf(r8, 0x21, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r5, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0xe3c4e312bb2ad62d}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x801}, 0x40010) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30000000"], 0x20}}, 0x0) 06:28:09 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r3, 0x0, 0x0) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x1c, r2, 0x3c5ae93e4bd80955, 0xffffffff, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x1c}}, 0x0) 06:28:09 executing program 2: r0 = syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x3, &(0x7f0000000000)=0x5, &(0x7f0000000040)=0x5) (async) ptrace$poke(0x5, r0, &(0x7f0000000080), 0x1) 06:28:09 executing program 2: syz_clone(0x2000100, 0x0, 0x36, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x9d27, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r1, 0x9d27, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r2, 0x9d27, 0x0, 0x0) sched_rr_get_interval(r2, &(0x7f0000000040)) 06:28:09 executing program 4: getpgid(0x0) r0 = syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/pid\x00') 06:28:09 executing program 1: r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) accept4$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) accept$phonet_pipe(r4, &(0x7f0000000440), &(0x7f0000000480)=0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) getpgid(0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r7) sendmsg$IEEE802154_LIST_IFACE(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r9, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r9, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x1001c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) setsockopt$inet6_dccp_buf(r5, 0x21, 0x0, 0x0, 0x0) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30000000"], 0x20}}, 0x0) 06:28:09 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r3, 0x0, 0x0) (async) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x4000000) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x1c, r2, 0x3c5ae93e4bd80955, 0xffffffff, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x1c}}, 0x0) 06:28:09 executing program 4: getpgid(0x0) r0 = syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/pid\x00') 06:28:09 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@ack={{}, {0x1}}, 0xa) 06:28:09 executing program 0: setfsuid(0xee01) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x0) [ 1068.861463][ T6030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:09 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r3, 0x0, 0x0) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x1c, r2, 0x3c5ae93e4bd80955, 0xffffffff, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x1c}}, 0x0) [ 1068.884703][ T6031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1068.890746][ T6039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1068.907380][ T6040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:09 executing program 4: getpgid(0x0) (async) r0 = syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/pid\x00') 06:28:09 executing program 2: syz_clone(0x2000100, 0x0, 0x36, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x9d27, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r1, 0x9d27, 0x0, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r2, 0x9d27, 0x0, 0x0) sched_rr_get_interval(r2, &(0x7f0000000040)) 06:28:09 executing program 1: r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) accept4$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) accept$phonet_pipe(r4, &(0x7f0000000440), &(0x7f0000000480)=0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) getpgid(0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) pipe2$watch_queue(&(0x7f0000000400), 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r6) sendmsg$IEEE802154_LIST_IFACE(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r8, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r8, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x1001c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30000000"], 0x20}}, 0x0) 06:28:09 executing program 4: syz_clone(0x12084100, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:09 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r2, 0x400, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) 06:28:09 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r2, 0x400, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) 06:28:09 executing program 0: sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x800}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc020}, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) 06:28:09 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@ack={{}, {0x1}}, 0xa) (async) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@ack={{}, {0x1}}, 0xa) [ 1069.274166][ T6081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:09 executing program 1: r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) accept4$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) accept$phonet_pipe(r4, &(0x7f0000000440), &(0x7f0000000480)=0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) getpgid(0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) pipe2$watch_queue(&(0x7f0000000400), 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r5) sendmsg$IEEE802154_LIST_IFACE(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r7, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}}, 0x0) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30000000"], 0x20}}, 0x0) 06:28:09 executing program 2: syz_clone(0x2000100, 0x0, 0x36, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x9d27, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r1, 0x9d27, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r2, 0x9d27, 0x0, 0x0) sched_rr_get_interval(r2, &(0x7f0000000040)) syz_clone(0x2000100, 0x0, 0x36, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) migrate_pages(r0, 0x9d27, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) migrate_pages(r1, 0x9d27, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) migrate_pages(r2, 0x9d27, 0x0, 0x0) (async) sched_rr_get_interval(r2, &(0x7f0000000040)) (async) [ 1069.292823][ T6081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1069.300234][ T6084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:09 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r2, 0x400, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) [ 1069.334128][ T6085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:09 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) r5 = syz_clone(0x20020800, &(0x7f0000000040)="b8f8ad17ec9c0e7ab49a1a0856252ef1d2a704f9ea26a6d109c7d5ec4121286372cc848eec1bd4f405bd483bb7c470b87b7ecd275058c56a4a1afd9c9c71a53195519d7d935d87", 0x47, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="8fc52baa265900f65309a4949a747919c3b5206e0cd01d9e5063f6e50a33181cfef7bf9012a34de57520deecf74394450f510882390fffd849bcc08ba9dde63375bab9ea1684004c2f4fbf1f44f1dffdec0630cf1683cfcab369d2f93659adca54f6f9b30c9c704e2a70a0a0e54e9f2aa18f93720290f279") pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r6, 0x21, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="080029bd7000fddbdf251400000008001c00", @ANYRES32=0x0, @ANYBLOB="48001c00", @ANYRES32=r5, @ANYBLOB="080001007737b381080001000200000008000100010000000800010002000000080001000000000008001c00", @ANYRES32, @ANYBLOB="08001d00", @ANYRES32=r6, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r8, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) 06:28:10 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) r5 = syz_clone(0x20020800, &(0x7f0000000040)="b8f8ad17ec9c0e7ab49a1a0856252ef1d2a704f9ea26a6d109c7d5ec4121286372cc848eec1bd4f405bd483bb7c470b87b7ecd275058c56a4a1afd9c9c71a53195519d7d935d87", 0x47, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="8fc52baa265900f65309a4949a747919c3b5206e0cd01d9e5063f6e50a33181cfef7bf9012a34de57520deecf74394450f510882390fffd849bcc08ba9dde63375bab9ea1684004c2f4fbf1f44f1dffdec0630cf1683cfcab369d2f93659adca54f6f9b30c9c704e2a70a0a0e54e9f2aa18f93720290f279") pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r6, 0x21, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="080029bd7000fddbdf251400000008001c00", @ANYRES32=0x0, @ANYBLOB="48001c00", @ANYRES32=r5, @ANYBLOB="080001007737b381080001000200000008000100010000000800010002000000080001000000000008001c00", @ANYRES32, @ANYBLOB="08001d00", @ANYRES32=r6, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r8, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) (async) syz_clone(0x20020800, &(0x7f0000000040)="b8f8ad17ec9c0e7ab49a1a0856252ef1d2a704f9ea26a6d109c7d5ec4121286372cc848eec1bd4f405bd483bb7c470b87b7ecd275058c56a4a1afd9c9c71a53195519d7d935d87", 0x47, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="8fc52baa265900f65309a4949a747919c3b5206e0cd01d9e5063f6e50a33181cfef7bf9012a34de57520deecf74394450f510882390fffd849bcc08ba9dde63375bab9ea1684004c2f4fbf1f44f1dffdec0630cf1683cfcab369d2f93659adca54f6f9b30c9c704e2a70a0a0e54e9f2aa18f93720290f279") (async) pipe2$watch_queue(&(0x7f0000000400), 0x80) (async) setsockopt$inet6_dccp_buf(r6, 0x21, 0x0, 0x0, 0x0) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="080029bd7000fddbdf251400000008001c00", @ANYRES32=0x0, @ANYBLOB="48001c00", @ANYRES32=r5, @ANYBLOB="080001007737b381080001000200000008000100010000000800010002000000080001000000000008001c00", @ANYRES32, @ANYBLOB="08001d00", @ANYRES32=r6, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) (async) sendmsg$IEEE802154_LIST_IFACE(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r8, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) (async) 06:28:10 executing program 1: r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) accept4$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) accept$phonet_pipe(r4, &(0x7f0000000440), &(0x7f0000000480)=0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) getpgid(0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) pipe2$watch_queue(&(0x7f0000000400), 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r5) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30000000"], 0x20}}, 0x0) 06:28:10 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r2) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) (async) r5 = syz_clone(0x20020800, &(0x7f0000000040)="b8f8ad17ec9c0e7ab49a1a0856252ef1d2a704f9ea26a6d109c7d5ec4121286372cc848eec1bd4f405bd483bb7c470b87b7ecd275058c56a4a1afd9c9c71a53195519d7d935d87", 0x47, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="8fc52baa265900f65309a4949a747919c3b5206e0cd01d9e5063f6e50a33181cfef7bf9012a34de57520deecf74394450f510882390fffd849bcc08ba9dde63375bab9ea1684004c2f4fbf1f44f1dffdec0630cf1683cfcab369d2f93659adca54f6f9b30c9c704e2a70a0a0e54e9f2aa18f93720290f279") (async) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r6, 0x21, 0x0, 0x0, 0x0) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="080029bd7000fddbdf251400000008001c00", @ANYRES32=0x0, @ANYBLOB="48001c00", @ANYRES32=r5, @ANYBLOB="080001007737b381080001000200000008000100010000000800010002000000080001000000000008001c00", @ANYRES32, @ANYBLOB="08001d00", @ANYRES32=r6, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r8, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) 06:28:10 executing program 4: syz_clone(0x12084100, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:10 executing program 0: sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x800}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc020}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) 06:28:10 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0) setuid(r0) setuid(r0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0xfd) 06:28:10 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r1, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) 06:28:10 executing program 1: r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) accept4$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) accept$phonet_pipe(r4, &(0x7f0000000440), &(0x7f0000000480)=0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) getpgid(0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) pipe2$watch_queue(&(0x7f0000000400), 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30000000"], 0x20}}, 0x0) [ 1069.803177][ T6129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1069.833986][ T6129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1069.840275][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:10 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r1, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) (async) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r1, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) (async) 06:28:10 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2200c0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f00000001c0)={r1, 0x5, &(0x7f0000000100)=[0x5, 0xdcb, 0xa3, 0x81, 0x0], &(0x7f0000000140)=[0xfff, 0x1, 0x9, 0x7], &(0x7f0000000180)=[0x7, 0x80, 0x7f, 0x1000, 0x3]}) syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:10 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r1, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) (async) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r1, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) (async) 06:28:10 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x402, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000c00}, 0x40010) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000081) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="75310bd45cf0bf3ae70259f1d82810d7abafe749e5a3a30a2c00296a85e01cc0f2999db66ada98a5", @ANYRES16=r2, @ANYBLOB="550900000000000000001f0000000a0001007770616e30000000"], 0x20}}, 0x0) 06:28:10 executing program 1: r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) accept4$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) accept$phonet_pipe(r4, &(0x7f0000000440), &(0x7f0000000480)=0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) getpgid(0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) pipe2$watch_queue(&(0x7f0000000400), 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30000000"], 0x20}}, 0x0) 06:28:10 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async, rerun: 64) getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0) (rerun: 64) setuid(r0) setuid(r0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[@ANYBLOB="b0144000ffffffffffffffffffffffff505050505050f50f0100030067001001e9dd84653dd461a249a2b75a2f30c00870545c260100b4347c355e9cc14b3d0729e70da7ca1538b1fb5ed44d9ae2ebceec042257a2a477f3cd5ac6413d6d57558d1d400abaf2db6914d72b43a23b22645774597e51dd7cb3755674c56dd9fcc290f68597a23146918c807c48f42c02d3a95cb9b67adca4b849ef5500b16eb08e38dcd4ad39c57ddd542e417919c3d6086c436242eada06559a90660894c573e4e69e3535d276e6e7d6b37bce64c8edaef056172968bfe7c9e67bff28f7642b4a1efe0cfcb056f726cfbc12c5cf5b3dc57c3663be22361bd03bc9727e9f"], 0xfd) 06:28:10 executing program 0: sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x800}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc020}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) 06:28:10 executing program 4: syz_clone(0x12084100, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1070.236953][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.245048][ T6176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.256806][ T6172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.264481][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:10 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2200c0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f00000001c0)={r1, 0x5, &(0x7f0000000100)=[0x5, 0xdcb, 0xa3, 0x81, 0x0], &(0x7f0000000140)=[0xfff, 0x1, 0x9, 0x7], &(0x7f0000000180)=[0x7, 0x80, 0x7f, 0x1000, 0x3]}) syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1070.276145][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.300249][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.319752][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:10 executing program 1: r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) accept4$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) accept$phonet_pipe(r4, &(0x7f0000000440), &(0x7f0000000480)=0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) getpgid(0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) pipe2$watch_queue(&(0x7f0000000400), 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30000000"], 0x20}}, 0x0) [ 1070.347357][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:10 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x402, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000c00}, 0x40010) (async) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000081) (async) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="75310bd45cf0bf3ae70259f1d82810d7abafe749e5a3a30a2c00296a85e01cc0f2999db66ada98a5", @ANYRES16=r2, @ANYBLOB="550900000000000000001f0000000a0001007770616e30000000"], 0x20}}, 0x0) [ 1070.371064][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.393746][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.398403][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.409663][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.419518][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.431857][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.442672][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.455748][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.470551][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.486741][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.505344][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:11 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2200c0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f00000001c0)={r1, 0x5, &(0x7f0000000100)=[0x5, 0xdcb, 0xa3, 0x81, 0x0], &(0x7f0000000140)=[0xfff, 0x1, 0x9, 0x7], &(0x7f0000000180)=[0x7, 0x80, 0x7f, 0x1000, 0x3]}) syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2200c0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f00000001c0)={r1, 0x5, &(0x7f0000000100)=[0x5, 0xdcb, 0xa3, 0x81, 0x0], &(0x7f0000000140)=[0xfff, 0x1, 0x9, 0x7], &(0x7f0000000180)=[0x7, 0x80, 0x7f, 0x1000, 0x3]}) (async) syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) [ 1070.523028][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:11 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x402, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000c00}, 0x40010) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000081) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="75310bd45cf0bf3ae70259f1d82810d7abafe749e5a3a30a2c00296a85e01cc0f2999db66ada98a5", @ANYRES16=r2, @ANYBLOB="550900000000000000001f0000000a0001007770616e30000000"], 0x20}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan4\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) (async) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x402, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000c00}, 0x40010) (async) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000081) (async) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="75310bd45cf0bf3ae70259f1d82810d7abafe749e5a3a30a2c00296a85e01cc0f2999db66ada98a5", @ANYRES16=r2, @ANYBLOB="550900000000000000001f0000000a0001007770616e30000000"], 0x20}}, 0x0) (async) [ 1070.549167][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.566658][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:11 executing program 0: rt_sigaction(0x33, &(0x7f0000000200)={&(0x7f0000000040)="e34dcec70db73861a8b55f378bbab83a17ac44835ddd71323f4b021446a882c8f712475142858024bbf03b1f310394542f0c", 0x80000000, &(0x7f0000000080)="3d3b9f6ae96b9c6364325b546c646e599649ddb483be19f42aac377a4c8912b1b1f429f94a9cb0d0be67045cf4f12c8816cb", {[0xdcc]}}, &(0x7f0000000180)={&(0x7f0000000100)="6670bce62f5ec78dd6668de6877eb2cb878c773560a75848f689994d976cdd2854b977e7c8e0189916fcd489550fc6aad307", 0x0, &(0x7f0000000140)="c1b0947f4d793f9ecc0fe27487e86bd39c00c119b6c87ca4cea55469818eb5d2b550302a85610c86a8c2f42e86d20105a7ec"}, 0x8, &(0x7f00000001c0)) rt_sigaction(0xc, &(0x7f0000000300)={&(0x7f0000000280)="62933a82625e015dd18d10fd0085943d688c0059b50e869646920e8c5a5c184eea67289b904451ca10d6547eff34cb9ffa8e", 0x0, &(0x7f00000002c0)="536cd770103959f99ea814829b565d8ec5360c2c4e48fe3c6a0519fe51add01b77c9e3a828271c328034f40e3b83d1447e25", {[0x8]}}, 0x0, 0x8, &(0x7f0000000340)) rt_sigaction(0x13, &(0x7f0000000400)={&(0x7f0000000000)="852d2de2bcf5ef59ee67b0ebd0edd85fcf738fe157cf1145a526560830d91a217a1ab0945f8a11fa7a022934e1ba099e58c8", 0x50000004, &(0x7f00000003c0)="d8e7cbae5ea51b8bb76d2d48afed1cba46668e8384b59497366bd1e85f85af9d06118e2e1e739f8b84bd8fc1093a70dfd3af", {[0x6]}}, &(0x7f00000004c0)={&(0x7f0000000440)="b7683149dbeebaaf1a886ca7574044f76128357d7f3a393f921dca2f4cd059df5d37ba163dbfa6c07b9a9b598ed7d8c29e7a", 0x0, &(0x7f0000000480)="74c925774c617ddcc90d36d5e28abdd2d345cc954607591960893bc50cb26554bb26a6eb863900d649a33c03b95223f290cc"}, 0x8, &(0x7f0000000500)) rt_sigprocmask(0x1, &(0x7f00000000c0), &(0x7f0000000380), 0x8) syz_80211_inject_frame(&(0x7f0000000240)=@broadcast, 0x0, 0xfffffffffffffdf0) 06:28:11 executing program 1: r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) accept4$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) accept$phonet_pipe(r4, &(0x7f0000000440), &(0x7f0000000480)=0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) getpgid(0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) pipe2$watch_queue(&(0x7f0000000400), 0x80) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30000000"], 0x20}}, 0x0) [ 1070.602267][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.624232][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:11 executing program 4: r0 = syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x400, 0x7, {r0}, {}, 0x3, 0x80000001}) [ 1070.633566][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.640753][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.651620][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.658554][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.664397][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.668828][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.677608][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.684941][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.691786][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.699261][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.708848][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:11 executing program 4: r0 = syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x400, 0x7, {r0}, {}, 0x3, 0x80000001}) [ 1070.724434][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.738961][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.755267][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.769227][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.796886][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.810551][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.820246][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.829044][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.836892][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.851439][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.855645][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.860728][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.864590][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.867566][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.870525][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.876836][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.880087][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.883254][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.887483][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.890632][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.899172][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.902499][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.906872][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.909995][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.913825][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.917039][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.920206][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.923719][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.927048][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.930282][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.933520][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.936666][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:11 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0) setuid(r0) (async) setuid(r0) (async) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[@ANYBLOB="b0144000ffffffffffffffffffffffff505050505050f50f0100030067001001e9dd84653dd461a249a2b75a2f30c00870545c260100b4347c355e9cc14b3d0729e70da7ca1538b1fb5ed44d9ae2ebceec042257a2a477f3cd5ac6413d6d57558d1d400abaf2db6914d72b43a23b22645774597e51dd7cb3755674c56dd9fcc290f68597a23146918c807c48f42c02d3a95cb9b67adca4b849ef5500b16eb08e38dcd4ad39c57ddd542e417919c3d6086c436242eada06559a90660894c573e4e69e3535d276e6e7d6b37bce64c8edaef056172968bfe7c9e67bff28f7642b4a1efe0cfcb056f726cfbc12c5cf5b3dc57c3663be22361bd03bc9727e9f"], 0xfd) 06:28:11 executing program 2: pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x12}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x40844}, 0x40) syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:11 executing program 5: r0 = syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x400, 0x7, {r0}, {}, 0x3, 0x80000001}) 06:28:11 executing program 1: r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) accept4$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) accept$phonet_pipe(r4, &(0x7f0000000440), &(0x7f0000000480)=0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) getpgid(0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30000000"], 0x20}}, 0x0) 06:28:11 executing program 4: r0 = syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x400, 0x7, {r0}, {}, 0x3, 0x80000001}) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x400, 0x7, {r0}, {}, 0x3, 0x80000001}) 06:28:11 executing program 0: rt_sigaction(0x33, &(0x7f0000000200)={&(0x7f0000000040)="e34dcec70db73861a8b55f378bbab83a17ac44835ddd71323f4b021446a882c8f712475142858024bbf03b1f310394542f0c", 0x80000000, &(0x7f0000000080)="3d3b9f6ae96b9c6364325b546c646e599649ddb483be19f42aac377a4c8912b1b1f429f94a9cb0d0be67045cf4f12c8816cb", {[0xdcc]}}, &(0x7f0000000180)={&(0x7f0000000100)="6670bce62f5ec78dd6668de6877eb2cb878c773560a75848f689994d976cdd2854b977e7c8e0189916fcd489550fc6aad307", 0x0, &(0x7f0000000140)="c1b0947f4d793f9ecc0fe27487e86bd39c00c119b6c87ca4cea55469818eb5d2b550302a85610c86a8c2f42e86d20105a7ec"}, 0x8, &(0x7f00000001c0)) rt_sigaction(0xc, &(0x7f0000000300)={&(0x7f0000000280)="62933a82625e015dd18d10fd0085943d688c0059b50e869646920e8c5a5c184eea67289b904451ca10d6547eff34cb9ffa8e", 0x0, &(0x7f00000002c0)="536cd770103959f99ea814829b565d8ec5360c2c4e48fe3c6a0519fe51add01b77c9e3a828271c328034f40e3b83d1447e25", {[0x8]}}, 0x0, 0x8, &(0x7f0000000340)) rt_sigaction(0x13, &(0x7f0000000400)={&(0x7f0000000000)="852d2de2bcf5ef59ee67b0ebd0edd85fcf738fe157cf1145a526560830d91a217a1ab0945f8a11fa7a022934e1ba099e58c8", 0x50000004, &(0x7f00000003c0)="d8e7cbae5ea51b8bb76d2d48afed1cba46668e8384b59497366bd1e85f85af9d06118e2e1e739f8b84bd8fc1093a70dfd3af", {[0x6]}}, &(0x7f00000004c0)={&(0x7f0000000440)="b7683149dbeebaaf1a886ca7574044f76128357d7f3a393f921dca2f4cd059df5d37ba163dbfa6c07b9a9b598ed7d8c29e7a", 0x0, &(0x7f0000000480)="74c925774c617ddcc90d36d5e28abdd2d345cc954607591960893bc50cb26554bb26a6eb863900d649a33c03b95223f290cc"}, 0x8, &(0x7f0000000500)) rt_sigprocmask(0x1, &(0x7f00000000c0), &(0x7f0000000380), 0x8) syz_80211_inject_frame(&(0x7f0000000240)=@broadcast, 0x0, 0xfffffffffffffdf0) rt_sigaction(0x33, &(0x7f0000000200)={&(0x7f0000000040)="e34dcec70db73861a8b55f378bbab83a17ac44835ddd71323f4b021446a882c8f712475142858024bbf03b1f310394542f0c", 0x80000000, &(0x7f0000000080)="3d3b9f6ae96b9c6364325b546c646e599649ddb483be19f42aac377a4c8912b1b1f429f94a9cb0d0be67045cf4f12c8816cb", {[0xdcc]}}, &(0x7f0000000180)={&(0x7f0000000100)="6670bce62f5ec78dd6668de6877eb2cb878c773560a75848f689994d976cdd2854b977e7c8e0189916fcd489550fc6aad307", 0x0, &(0x7f0000000140)="c1b0947f4d793f9ecc0fe27487e86bd39c00c119b6c87ca4cea55469818eb5d2b550302a85610c86a8c2f42e86d20105a7ec"}, 0x8, &(0x7f00000001c0)) (async) rt_sigaction(0xc, &(0x7f0000000300)={&(0x7f0000000280)="62933a82625e015dd18d10fd0085943d688c0059b50e869646920e8c5a5c184eea67289b904451ca10d6547eff34cb9ffa8e", 0x0, &(0x7f00000002c0)="536cd770103959f99ea814829b565d8ec5360c2c4e48fe3c6a0519fe51add01b77c9e3a828271c328034f40e3b83d1447e25", {[0x8]}}, 0x0, 0x8, &(0x7f0000000340)) (async) rt_sigaction(0x13, &(0x7f0000000400)={&(0x7f0000000000)="852d2de2bcf5ef59ee67b0ebd0edd85fcf738fe157cf1145a526560830d91a217a1ab0945f8a11fa7a022934e1ba099e58c8", 0x50000004, &(0x7f00000003c0)="d8e7cbae5ea51b8bb76d2d48afed1cba46668e8384b59497366bd1e85f85af9d06118e2e1e739f8b84bd8fc1093a70dfd3af", {[0x6]}}, &(0x7f00000004c0)={&(0x7f0000000440)="b7683149dbeebaaf1a886ca7574044f76128357d7f3a393f921dca2f4cd059df5d37ba163dbfa6c07b9a9b598ed7d8c29e7a", 0x0, &(0x7f0000000480)="74c925774c617ddcc90d36d5e28abdd2d345cc954607591960893bc50cb26554bb26a6eb863900d649a33c03b95223f290cc"}, 0x8, &(0x7f0000000500)) (async) rt_sigprocmask(0x1, &(0x7f00000000c0), &(0x7f0000000380), 0x8) (async) syz_80211_inject_frame(&(0x7f0000000240)=@broadcast, 0x0, 0xfffffffffffffdf0) (async) 06:28:11 executing program 0: rt_sigaction(0x33, &(0x7f0000000200)={&(0x7f0000000040)="e34dcec70db73861a8b55f378bbab83a17ac44835ddd71323f4b021446a882c8f712475142858024bbf03b1f310394542f0c", 0x80000000, &(0x7f0000000080)="3d3b9f6ae96b9c6364325b546c646e599649ddb483be19f42aac377a4c8912b1b1f429f94a9cb0d0be67045cf4f12c8816cb", {[0xdcc]}}, &(0x7f0000000180)={&(0x7f0000000100)="6670bce62f5ec78dd6668de6877eb2cb878c773560a75848f689994d976cdd2854b977e7c8e0189916fcd489550fc6aad307", 0x0, &(0x7f0000000140)="c1b0947f4d793f9ecc0fe27487e86bd39c00c119b6c87ca4cea55469818eb5d2b550302a85610c86a8c2f42e86d20105a7ec"}, 0x8, &(0x7f00000001c0)) (async) rt_sigaction(0x33, &(0x7f0000000200)={&(0x7f0000000040)="e34dcec70db73861a8b55f378bbab83a17ac44835ddd71323f4b021446a882c8f712475142858024bbf03b1f310394542f0c", 0x80000000, &(0x7f0000000080)="3d3b9f6ae96b9c6364325b546c646e599649ddb483be19f42aac377a4c8912b1b1f429f94a9cb0d0be67045cf4f12c8816cb", {[0xdcc]}}, &(0x7f0000000180)={&(0x7f0000000100)="6670bce62f5ec78dd6668de6877eb2cb878c773560a75848f689994d976cdd2854b977e7c8e0189916fcd489550fc6aad307", 0x0, &(0x7f0000000140)="c1b0947f4d793f9ecc0fe27487e86bd39c00c119b6c87ca4cea55469818eb5d2b550302a85610c86a8c2f42e86d20105a7ec"}, 0x8, &(0x7f00000001c0)) rt_sigaction(0xc, &(0x7f0000000300)={&(0x7f0000000280)="62933a82625e015dd18d10fd0085943d688c0059b50e869646920e8c5a5c184eea67289b904451ca10d6547eff34cb9ffa8e", 0x0, &(0x7f00000002c0)="536cd770103959f99ea814829b565d8ec5360c2c4e48fe3c6a0519fe51add01b77c9e3a828271c328034f40e3b83d1447e25", {[0x8]}}, 0x0, 0x8, &(0x7f0000000340)) rt_sigaction(0x13, &(0x7f0000000400)={&(0x7f0000000000)="852d2de2bcf5ef59ee67b0ebd0edd85fcf738fe157cf1145a526560830d91a217a1ab0945f8a11fa7a022934e1ba099e58c8", 0x50000004, &(0x7f00000003c0)="d8e7cbae5ea51b8bb76d2d48afed1cba46668e8384b59497366bd1e85f85af9d06118e2e1e739f8b84bd8fc1093a70dfd3af", {[0x6]}}, &(0x7f00000004c0)={&(0x7f0000000440)="b7683149dbeebaaf1a886ca7574044f76128357d7f3a393f921dca2f4cd059df5d37ba163dbfa6c07b9a9b598ed7d8c29e7a", 0x0, &(0x7f0000000480)="74c925774c617ddcc90d36d5e28abdd2d345cc954607591960893bc50cb26554bb26a6eb863900d649a33c03b95223f290cc"}, 0x8, &(0x7f0000000500)) rt_sigprocmask(0x1, &(0x7f00000000c0), &(0x7f0000000380), 0x8) syz_80211_inject_frame(&(0x7f0000000240)=@broadcast, 0x0, 0xfffffffffffffdf0) [ 1071.334180][ T6255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1071.344165][ T6258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:11 executing program 2: pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x12}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x40844}, 0x40) syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:11 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0x5, 0x80}, 0x10) setsockopt$inet6_dccp_buf(r0, 0x21, 0xd, 0x0, 0x0) ioctl$SYNC_IOC_FILE_INFO(r0, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)=[{}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x7, 0xe1c, 0x1074, r0, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x48) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x29, 0x4c, 0x20, 0x1000, 0x24, @remote, @mcast1, 0x20, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x20, 0x0, 0x8, @mcast2, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x7800, 0x7, 0xc2a, 0x8001}}) r6 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) r7 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r8, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r8, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000001800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001840)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001ac0)={0xe0, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}, {{0x8}, {0x4}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x400c000) getsockname$packet(0xffffffffffffffff, &(0x7f0000001800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001840)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001ac0)={0xe0, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}, {{0x8}, {0x4}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x400c000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x13, 0x9, 0x0, 0x4, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x700, 0x0, 0x5d, 0xf6fc}}) getsockname$packet(r0, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000005c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000640)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x2d, 0x7f, 0x20, 0x6, 0x54, @local, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x8, 0x8000, 0x40, 0x195}}) r15 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) r16 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r16, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r17, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r15, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r17, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001380)={&(0x7f0000000740)={0xc24, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8}, {0x214, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r3}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0x3, 0x2, 0x7}, {0x0, 0x7f, 0x7f, 0xfffffff9}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xdf}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8}, {0x90, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x1f8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x15}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800000}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x4}}, {{0x8, 0x1, r12}, {0x15c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r14}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0xc24}, 0x1, 0x0, 0x0, 0x4000000}, 0x8014) 06:28:11 executing program 5: rt_sigaction(0x33, &(0x7f0000000200)={&(0x7f0000000040)="e34dcec70db73861a8b55f378bbab83a17ac44835ddd71323f4b021446a882c8f712475142858024bbf03b1f310394542f0c", 0x80000000, &(0x7f0000000080)="3d3b9f6ae96b9c6364325b546c646e599649ddb483be19f42aac377a4c8912b1b1f429f94a9cb0d0be67045cf4f12c8816cb", {[0xdcc]}}, &(0x7f0000000180)={&(0x7f0000000100)="6670bce62f5ec78dd6668de6877eb2cb878c773560a75848f689994d976cdd2854b977e7c8e0189916fcd489550fc6aad307", 0x0, &(0x7f0000000140)="c1b0947f4d793f9ecc0fe27487e86bd39c00c119b6c87ca4cea55469818eb5d2b550302a85610c86a8c2f42e86d20105a7ec"}, 0x8, &(0x7f00000001c0)) rt_sigaction(0xc, &(0x7f0000000300)={&(0x7f0000000280)="62933a82625e015dd18d10fd0085943d688c0059b50e869646920e8c5a5c184eea67289b904451ca10d6547eff34cb9ffa8e", 0x0, &(0x7f00000002c0)="536cd770103959f99ea814829b565d8ec5360c2c4e48fe3c6a0519fe51add01b77c9e3a828271c328034f40e3b83d1447e25", {[0x8]}}, 0x0, 0x8, &(0x7f0000000340)) rt_sigaction(0x13, &(0x7f0000000400)={&(0x7f0000000000)="852d2de2bcf5ef59ee67b0ebd0edd85fcf738fe157cf1145a526560830d91a217a1ab0945f8a11fa7a022934e1ba099e58c8", 0x50000004, &(0x7f00000003c0)="d8e7cbae5ea51b8bb76d2d48afed1cba46668e8384b59497366bd1e85f85af9d06118e2e1e739f8b84bd8fc1093a70dfd3af", {[0x6]}}, &(0x7f00000004c0)={&(0x7f0000000440)="b7683149dbeebaaf1a886ca7574044f76128357d7f3a393f921dca2f4cd059df5d37ba163dbfa6c07b9a9b598ed7d8c29e7a", 0x0, &(0x7f0000000480)="74c925774c617ddcc90d36d5e28abdd2d345cc954607591960893bc50cb26554bb26a6eb863900d649a33c03b95223f290cc"}, 0x8, &(0x7f0000000500)) rt_sigprocmask(0x1, &(0x7f00000000c0), &(0x7f0000000380), 0x8) syz_80211_inject_frame(&(0x7f0000000240)=@broadcast, 0x0, 0xfffffffffffffdf0) 06:28:12 executing program 2: pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x12}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x40844}, 0x40) (async) syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:12 executing program 1: r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) accept4$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) accept$phonet_pipe(r4, &(0x7f0000000440), &(0x7f0000000480)=0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) getpgid(0x0) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30000000"], 0x20}}, 0x0) 06:28:12 executing program 3: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000180)) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02000000", @ANYRES16=0x0, @ANYBLOB="12002dbd7000ffdb564014277a7797e3b3df25050000000800020008000000080092020000000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000240), 0xffffffffffffffff) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r4, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r4, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) r5 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) r6 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r7, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r7, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000001800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001840)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001ac0)={0xe0, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}, {{0x8}, {0x4}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x400c000) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x220, r1, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x204, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe10}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x6b39, 0x7, 0x9, 0x3db}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x8, 0x2, 0xfe, 0x5}, {0xb08, 0xe9, 0x3f, 0x3}, {0x8001, 0x2, 0x1, 0xffff}, {0xfff, 0x5, 0x0, 0x4}, {0x3ff, 0x3, 0x20, 0x10000}, {0x6ca2, 0x1, 0xcb, 0x5}]}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1000, 0x1f, 0x8, 0x400}, {0x7f, 0x3, 0x1, 0x10001}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}]}}]}, 0x220}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) 06:28:12 executing program 2: syz_clone(0x80029100, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:12 executing program 1: r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) accept4$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) accept$phonet_pipe(r4, &(0x7f0000000440), &(0x7f0000000480)=0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30000000"], 0x20}}, 0x0) 06:28:12 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0x5, 0x80}, 0x10) (async) setsockopt$inet6_dccp_buf(r0, 0x21, 0xd, 0x0, 0x0) (async) ioctl$SYNC_IOC_FILE_INFO(r0, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)=[{}]}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x7, 0xe1c, 0x1074, r0, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x48) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) (async) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x29, 0x4c, 0x20, 0x1000, 0x24, @remote, @mcast1, 0x20, 0x1, 0x1}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x20, 0x0, 0x8, @mcast2, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x7800, 0x7, 0xc2a, 0x8001}}) r6 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) (async) r7 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r8, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r8, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000001800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001840)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001ac0)={0xe0, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}, {{0x8}, {0x4}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x400c000) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001840)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001ac0)={0xe0, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}, {{0x8}, {0x4}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x400c000) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x13, 0x9, 0x0, 0x4, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x700, 0x0, 0x5d, 0xf6fc}}) getsockname$packet(r0, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000005c0)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000640)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x2d, 0x7f, 0x20, 0x6, 0x54, @local, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x8, 0x8000, 0x40, 0x195}}) r15 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) (async) r16 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r16, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r17, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r15, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r17, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001380)={&(0x7f0000000740)={0xc24, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8}, {0x214, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r3}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0x3, 0x2, 0x7}, {0x0, 0x7f, 0x7f, 0xfffffff9}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xdf}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8}, {0x90, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x1f8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x15}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800000}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x4}}, {{0x8, 0x1, r12}, {0x15c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r14}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0xc24}, 0x1, 0x0, 0x0, 0x4000000}, 0x8014) 06:28:12 executing program 0: syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x0) 06:28:12 executing program 1: r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) accept4$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) accept$phonet_pipe(r4, &(0x7f0000000440), &(0x7f0000000480)=0x10) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30000000"], 0x20}}, 0x0) 06:28:12 executing program 2: syz_clone(0x80029100, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1071.727538][ T6288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1071.758777][ T6297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:12 executing program 1: r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) accept4$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) pipe2$watch_queue(&(0x7f00000003c0), 0x80) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30000000"], 0x20}}, 0x0) 06:28:12 executing program 5: rt_sigaction(0x33, &(0x7f0000000200)={&(0x7f0000000040)="e34dcec70db73861a8b55f378bbab83a17ac44835ddd71323f4b021446a882c8f712475142858024bbf03b1f310394542f0c", 0x80000000, &(0x7f0000000080)="3d3b9f6ae96b9c6364325b546c646e599649ddb483be19f42aac377a4c8912b1b1f429f94a9cb0d0be67045cf4f12c8816cb", {[0xdcc]}}, &(0x7f0000000180)={&(0x7f0000000100)="6670bce62f5ec78dd6668de6877eb2cb878c773560a75848f689994d976cdd2854b977e7c8e0189916fcd489550fc6aad307", 0x0, &(0x7f0000000140)="c1b0947f4d793f9ecc0fe27487e86bd39c00c119b6c87ca4cea55469818eb5d2b550302a85610c86a8c2f42e86d20105a7ec"}, 0x8, &(0x7f00000001c0)) rt_sigaction(0xc, &(0x7f0000000300)={&(0x7f0000000280)="62933a82625e015dd18d10fd0085943d688c0059b50e869646920e8c5a5c184eea67289b904451ca10d6547eff34cb9ffa8e", 0x0, &(0x7f00000002c0)="536cd770103959f99ea814829b565d8ec5360c2c4e48fe3c6a0519fe51add01b77c9e3a828271c328034f40e3b83d1447e25", {[0x8]}}, 0x0, 0x8, &(0x7f0000000340)) rt_sigaction(0x13, &(0x7f0000000400)={&(0x7f0000000000)="852d2de2bcf5ef59ee67b0ebd0edd85fcf738fe157cf1145a526560830d91a217a1ab0945f8a11fa7a022934e1ba099e58c8", 0x50000004, &(0x7f00000003c0)="d8e7cbae5ea51b8bb76d2d48afed1cba46668e8384b59497366bd1e85f85af9d06118e2e1e739f8b84bd8fc1093a70dfd3af", {[0x6]}}, &(0x7f00000004c0)={&(0x7f0000000440)="b7683149dbeebaaf1a886ca7574044f76128357d7f3a393f921dca2f4cd059df5d37ba163dbfa6c07b9a9b598ed7d8c29e7a", 0x0, &(0x7f0000000480)="74c925774c617ddcc90d36d5e28abdd2d345cc954607591960893bc50cb26554bb26a6eb863900d649a33c03b95223f290cc"}, 0x8, &(0x7f0000000500)) rt_sigprocmask(0x1, &(0x7f00000000c0), &(0x7f0000000380), 0x8) syz_80211_inject_frame(&(0x7f0000000240)=@broadcast, 0x0, 0xfffffffffffffdf0) 06:28:12 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x0, 0x5, 0x80}, 0x10) (async) setsockopt$inet6_dccp_buf(r0, 0x21, 0xd, 0x0, 0x0) (async) ioctl$SYNC_IOC_FILE_INFO(r0, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)=[{}]}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x7, 0xe1c, 0x1074, r0, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x48) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x29, 0x4c, 0x20, 0x1000, 0x24, @remote, @mcast1, 0x20, 0x1, 0x1}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x20, 0x0, 0x8, @mcast2, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x7800, 0x7, 0xc2a, 0x8001}}) (async) r6 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) r7 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r8, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r8, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000001800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001840)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001ac0)={0xe0, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}, {{0x8}, {0x4}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x400c000) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001840)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001ac0)={0xe0, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}, {{0x8}, {0x4}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x400c000) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x13, 0x9, 0x0, 0x4, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x700, 0x0, 0x5d, 0xf6fc}}) (async) getsockname$packet(r0, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000005c0)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000640)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x2d, 0x7f, 0x20, 0x6, 0x54, @local, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x8, 0x8000, 0x40, 0x195}}) (async) r15 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) r16 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r16, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r17, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r15, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r17, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001380)={&(0x7f0000000740)={0xc24, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8}, {0x214, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r3}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0x3, 0x2, 0x7}, {0x0, 0x7f, 0x7f, 0xfffffff9}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xdf}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8}, {0x90, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x1f8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x15}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800000}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x4}}, {{0x8, 0x1, r12}, {0x15c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r14}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0xc24}, 0x1, 0x0, 0x0, 0x4000000}, 0x8014) 06:28:12 executing program 2: syz_clone(0x80029100, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:12 executing program 1: r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) accept4$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30000000"], 0x20}}, 0x0) 06:28:12 executing program 4: r0 = syz_clone(0x80028000, 0x0, 0x5f, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3f) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x49bc}, @NBD_ATTR_BACKEND_IDENTIFIER={0xb, 0xa, '*$)&\'&('}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x4c}}, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xf7d4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8001}]}, 0x74}}, 0x10) r4 = getpgid(r0) ptrace$setregset(0x4205, r4, 0x200, &(0x7f0000000080)={&(0x7f0000000240)="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", 0x13e}) 06:28:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x4200) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000180)={r1}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000040)=[0x2, 0x2, 0x3, 0x80, 0x6], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x400, 0x1, 0x4]}) syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:12 executing program 1: r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) accept4$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30000000"], 0x20}}, 0x0) 06:28:12 executing program 0: syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x0) 06:28:12 executing program 5: rt_sigaction(0x33, &(0x7f0000000200)={&(0x7f0000000040)="e34dcec70db73861a8b55f378bbab83a17ac44835ddd71323f4b021446a882c8f712475142858024bbf03b1f310394542f0c", 0x80000000, &(0x7f0000000080)="3d3b9f6ae96b9c6364325b546c646e599649ddb483be19f42aac377a4c8912b1b1f429f94a9cb0d0be67045cf4f12c8816cb", {[0xdcc]}}, &(0x7f0000000180)={&(0x7f0000000100)="6670bce62f5ec78dd6668de6877eb2cb878c773560a75848f689994d976cdd2854b977e7c8e0189916fcd489550fc6aad307", 0x0, &(0x7f0000000140)="c1b0947f4d793f9ecc0fe27487e86bd39c00c119b6c87ca4cea55469818eb5d2b550302a85610c86a8c2f42e86d20105a7ec"}, 0x8, &(0x7f00000001c0)) rt_sigaction(0xc, &(0x7f0000000300)={&(0x7f0000000280)="62933a82625e015dd18d10fd0085943d688c0059b50e869646920e8c5a5c184eea67289b904451ca10d6547eff34cb9ffa8e", 0x0, &(0x7f00000002c0)="536cd770103959f99ea814829b565d8ec5360c2c4e48fe3c6a0519fe51add01b77c9e3a828271c328034f40e3b83d1447e25", {[0x8]}}, 0x0, 0x8, &(0x7f0000000340)) rt_sigaction(0x13, &(0x7f0000000400)={&(0x7f0000000000)="852d2de2bcf5ef59ee67b0ebd0edd85fcf738fe157cf1145a526560830d91a217a1ab0945f8a11fa7a022934e1ba099e58c8", 0x50000004, &(0x7f00000003c0)="d8e7cbae5ea51b8bb76d2d48afed1cba46668e8384b59497366bd1e85f85af9d06118e2e1e739f8b84bd8fc1093a70dfd3af", {[0x6]}}, &(0x7f00000004c0)={&(0x7f0000000440)="b7683149dbeebaaf1a886ca7574044f76128357d7f3a393f921dca2f4cd059df5d37ba163dbfa6c07b9a9b598ed7d8c29e7a", 0x0, &(0x7f0000000480)="74c925774c617ddcc90d36d5e28abdd2d345cc954607591960893bc50cb26554bb26a6eb863900d649a33c03b95223f290cc"}, 0x8, &(0x7f0000000500)) rt_sigprocmask(0x1, &(0x7f00000000c0), &(0x7f0000000380), 0x8) syz_80211_inject_frame(&(0x7f0000000240)=@broadcast, 0x0, 0xfffffffffffffdf0) 06:28:12 executing program 3: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000180)) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02000000", @ANYRES16=0x0, @ANYBLOB="12002dbd7000ffdb564014277a7797e3b3df25050000000800020008000000080092020000000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) (async) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000240), 0xffffffffffffffff) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) (async) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r4, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r4, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) r5 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) r6 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r7, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r7, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) (rerun: 32) getsockname$packet(0xffffffffffffffff, &(0x7f0000001800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001840)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001ac0)={0xe0, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}, {{0x8}, {0x4}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x400c000) (async, rerun: 32) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x220, r1, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x204, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe10}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x6b39, 0x7, 0x9, 0x3db}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x8, 0x2, 0xfe, 0x5}, {0xb08, 0xe9, 0x3f, 0x3}, {0x8001, 0x2, 0x1, 0xffff}, {0xfff, 0x5, 0x0, 0x4}, {0x3ff, 0x3, 0x20, 0x10000}, {0x6ca2, 0x1, 0xcb, 0x5}]}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1000, 0x1f, 0x8, 0x400}, {0x7f, 0x3, 0x1, 0x10001}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}]}}]}, 0x220}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) 06:28:12 executing program 1: r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) accept4$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30000000"], 0x20}}, 0x0) [ 1072.223577][ T6324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:12 executing program 1: r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) accept4$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30000000"], 0x20}}, 0x0) 06:28:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x4200) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000180)={r1}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000040)=[0x2, 0x2, 0x3, 0x80, 0x6], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x400, 0x1, 0x4]}) syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x4200) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000180)={r1}) (async) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000040)=[0x2, 0x2, 0x3, 0x80, 0x6], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x400, 0x1, 0x4]}) (async) syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 06:28:12 executing program 4: r0 = syz_clone(0x80028000, 0x0, 0x5f, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3f) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x49bc}, @NBD_ATTR_BACKEND_IDENTIFIER={0xb, 0xa, '*$)&\'&('}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x4c}}, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xf7d4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8001}]}, 0x74}}, 0x10) (async, rerun: 32) r4 = getpgid(r0) (rerun: 32) ptrace$setregset(0x4205, r4, 0x200, &(0x7f0000000080)={&(0x7f0000000240)="dc4cba9e1a6c1ec41aa26b85fa2a41c67b0ff4014681025f49900f198df9cce708f584d9d64a72384661f99ca66c4b00200000000000009acafefd94969a06688d137b698952f3cf0923e5b7b1cbf357132fb3561b9dddc804dfb37dd6e13d390f9564d8b78e6dd5ba4ae7f9b57ba20bd4495001ef14009cad9c04619b9e71ab00e59f58ff25054b7c13023b1fbb2a115d8b88248993c94f5f3a76f1358c7bb21d819e7d034e25c02e759cc2d0c681f654ff03a6b46cd51e5b69b30a9b13006a5fce88f1319c1f08452913b3b197eb5847644caccb13f5ad41e0062584cd8f08570138922796d3ef07a962a5a2f58f884cab39d4a879302a5badefa448b0b8547829057d1e", 0x13e}) 06:28:12 executing program 1: r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) accept4$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30000000"], 0x20}}, 0x0) 06:28:12 executing program 3: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000180)) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02000000", @ANYRES16=0x0, @ANYBLOB="12002dbd7000ffdb564014277a7797e3b3df25050000000800020008000000080092020000000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000040) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000240), 0xffffffffffffffff) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) (async) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r4, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r4, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) r5 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) (async) r6 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r7, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r7, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) (async, rerun: 32) getsockname$packet(0xffffffffffffffff, &(0x7f0000001800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001840)=0x14) (rerun: 32) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001ac0)={0xe0, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}, {{0x8}, {0x4}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x400c000) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x220, r1, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x204, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe10}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x6b39, 0x7, 0x9, 0x3db}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x8, 0x2, 0xfe, 0x5}, {0xb08, 0xe9, 0x3f, 0x3}, {0x8001, 0x2, 0x1, 0xffff}, {0xfff, 0x5, 0x0, 0x4}, {0x3ff, 0x3, 0x20, 0x10000}, {0x6ca2, 0x1, 0xcb, 0x5}]}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1000, 0x1f, 0x8, 0x400}, {0x7f, 0x3, 0x1, 0x10001}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}]}}]}, 0x220}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) 06:28:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x4200) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000180)={r1}) (async) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000040)=[0x2, 0x2, 0x3, 0x80, 0x6], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x400, 0x1, 0x4]}) (async) syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:13 executing program 4: syz_clone(0x80028000, 0x0, 0x5f, 0x0, 0x0, 0x0) (async) r0 = syz_clone(0x80028000, 0x0, 0x5f, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3f) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x49bc}, @NBD_ATTR_BACKEND_IDENTIFIER={0xb, 0xa, '*$)&\'&('}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x4c}}, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xf7d4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8001}]}, 0x74}}, 0x10) r4 = getpgid(r0) ptrace$setregset(0x4205, r4, 0x200, &(0x7f0000000080)={&(0x7f0000000240)="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", 0x13e}) (async) ptrace$setregset(0x4205, r4, 0x200, &(0x7f0000000080)={&(0x7f0000000240)="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", 0x13e}) 06:28:13 executing program 1: r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) accept4$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30000000"], 0x20}}, 0x0) 06:28:13 executing program 0: syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x0) 06:28:13 executing program 5: rt_sigaction(0x33, &(0x7f0000000200)={&(0x7f0000000040)="e34dcec70db73861a8b55f378bbab83a17ac44835ddd71323f4b021446a882c8f712475142858024bbf03b1f310394542f0c", 0x80000000, &(0x7f0000000080)="3d3b9f6ae96b9c6364325b546c646e599649ddb483be19f42aac377a4c8912b1b1f429f94a9cb0d0be67045cf4f12c8816cb", {[0xdcc]}}, &(0x7f0000000180)={&(0x7f0000000100)="6670bce62f5ec78dd6668de6877eb2cb878c773560a75848f689994d976cdd2854b977e7c8e0189916fcd489550fc6aad307", 0x0, &(0x7f0000000140)="c1b0947f4d793f9ecc0fe27487e86bd39c00c119b6c87ca4cea55469818eb5d2b550302a85610c86a8c2f42e86d20105a7ec"}, 0x8, &(0x7f00000001c0)) rt_sigaction(0xc, &(0x7f0000000300)={&(0x7f0000000280)="62933a82625e015dd18d10fd0085943d688c0059b50e869646920e8c5a5c184eea67289b904451ca10d6547eff34cb9ffa8e", 0x0, &(0x7f00000002c0)="536cd770103959f99ea814829b565d8ec5360c2c4e48fe3c6a0519fe51add01b77c9e3a828271c328034f40e3b83d1447e25", {[0x8]}}, 0x0, 0x8, &(0x7f0000000340)) rt_sigaction(0x13, &(0x7f0000000400)={&(0x7f0000000000)="852d2de2bcf5ef59ee67b0ebd0edd85fcf738fe157cf1145a526560830d91a217a1ab0945f8a11fa7a022934e1ba099e58c8", 0x50000004, &(0x7f00000003c0)="d8e7cbae5ea51b8bb76d2d48afed1cba46668e8384b59497366bd1e85f85af9d06118e2e1e739f8b84bd8fc1093a70dfd3af", {[0x6]}}, &(0x7f00000004c0)={&(0x7f0000000440)="b7683149dbeebaaf1a886ca7574044f76128357d7f3a393f921dca2f4cd059df5d37ba163dbfa6c07b9a9b598ed7d8c29e7a", 0x0, &(0x7f0000000480)="74c925774c617ddcc90d36d5e28abdd2d345cc954607591960893bc50cb26554bb26a6eb863900d649a33c03b95223f290cc"}, 0x8, &(0x7f0000000500)) rt_sigprocmask(0x1, &(0x7f00000000c0), &(0x7f0000000380), 0x8) 06:28:13 executing program 2: r0 = syz_clone(0xa0028200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r4, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x4000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000002}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x34, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PID={0x8, 0x1c, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40080) 06:28:13 executing program 1: r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) accept4$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30000000"], 0x20}}, 0x0) 06:28:13 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0xc0080) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)={r1}) 06:28:13 executing program 1: r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) accept4$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30000000"], 0x20}}, 0x0) [ 1072.604353][ T6375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1072.604935][ T6376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:13 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x10000) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x0, r1}) r2 = syz_clone(0x8186a480, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x8, &(0x7f0000000000)) 06:28:13 executing program 5: rt_sigaction(0x33, &(0x7f0000000200)={&(0x7f0000000040)="e34dcec70db73861a8b55f378bbab83a17ac44835ddd71323f4b021446a882c8f712475142858024bbf03b1f310394542f0c", 0x80000000, &(0x7f0000000080)="3d3b9f6ae96b9c6364325b546c646e599649ddb483be19f42aac377a4c8912b1b1f429f94a9cb0d0be67045cf4f12c8816cb", {[0xdcc]}}, &(0x7f0000000180)={&(0x7f0000000100)="6670bce62f5ec78dd6668de6877eb2cb878c773560a75848f689994d976cdd2854b977e7c8e0189916fcd489550fc6aad307", 0x0, &(0x7f0000000140)="c1b0947f4d793f9ecc0fe27487e86bd39c00c119b6c87ca4cea55469818eb5d2b550302a85610c86a8c2f42e86d20105a7ec"}, 0x8, &(0x7f00000001c0)) rt_sigaction(0xc, &(0x7f0000000300)={&(0x7f0000000280)="62933a82625e015dd18d10fd0085943d688c0059b50e869646920e8c5a5c184eea67289b904451ca10d6547eff34cb9ffa8e", 0x0, &(0x7f00000002c0)="536cd770103959f99ea814829b565d8ec5360c2c4e48fe3c6a0519fe51add01b77c9e3a828271c328034f40e3b83d1447e25", {[0x8]}}, 0x0, 0x8, &(0x7f0000000340)) rt_sigaction(0x13, &(0x7f0000000400)={&(0x7f0000000000)="852d2de2bcf5ef59ee67b0ebd0edd85fcf738fe157cf1145a526560830d91a217a1ab0945f8a11fa7a022934e1ba099e58c8", 0x50000004, &(0x7f00000003c0)="d8e7cbae5ea51b8bb76d2d48afed1cba46668e8384b59497366bd1e85f85af9d06118e2e1e739f8b84bd8fc1093a70dfd3af", {[0x6]}}, &(0x7f00000004c0)={&(0x7f0000000440)="b7683149dbeebaaf1a886ca7574044f76128357d7f3a393f921dca2f4cd059df5d37ba163dbfa6c07b9a9b598ed7d8c29e7a", 0x0, &(0x7f0000000480)="74c925774c617ddcc90d36d5e28abdd2d345cc954607591960893bc50cb26554bb26a6eb863900d649a33c03b95223f290cc"}, 0x8, &(0x7f0000000500)) 06:28:13 executing program 1: r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) accept4$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30000000"], 0x20}}, 0x0) 06:28:13 executing program 5: rt_sigaction(0x33, &(0x7f0000000200)={&(0x7f0000000040)="e34dcec70db73861a8b55f378bbab83a17ac44835ddd71323f4b021446a882c8f712475142858024bbf03b1f310394542f0c", 0x80000000, &(0x7f0000000080)="3d3b9f6ae96b9c6364325b546c646e599649ddb483be19f42aac377a4c8912b1b1f429f94a9cb0d0be67045cf4f12c8816cb", {[0xdcc]}}, &(0x7f0000000180)={&(0x7f0000000100)="6670bce62f5ec78dd6668de6877eb2cb878c773560a75848f689994d976cdd2854b977e7c8e0189916fcd489550fc6aad307", 0x0, &(0x7f0000000140)="c1b0947f4d793f9ecc0fe27487e86bd39c00c119b6c87ca4cea55469818eb5d2b550302a85610c86a8c2f42e86d20105a7ec"}, 0x8, &(0x7f00000001c0)) rt_sigaction(0x13, &(0x7f0000000400)={&(0x7f0000000000)="852d2de2bcf5ef59ee67b0ebd0edd85fcf738fe157cf1145a526560830d91a217a1ab0945f8a11fa7a022934e1ba099e58c8", 0x50000004, &(0x7f00000003c0)="d8e7cbae5ea51b8bb76d2d48afed1cba46668e8384b59497366bd1e85f85af9d06118e2e1e739f8b84bd8fc1093a70dfd3af", {[0x6]}}, &(0x7f00000004c0)={&(0x7f0000000440)="b7683149dbeebaaf1a886ca7574044f76128357d7f3a393f921dca2f4cd059df5d37ba163dbfa6c07b9a9b598ed7d8c29e7a", 0x0, &(0x7f0000000480)="74c925774c617ddcc90d36d5e28abdd2d345cc954607591960893bc50cb26554bb26a6eb863900d649a33c03b95223f290cc"}, 0x8, &(0x7f0000000500)) 06:28:13 executing program 5: rt_sigaction(0x13, &(0x7f0000000400)={&(0x7f0000000000)="852d2de2bcf5ef59ee67b0ebd0edd85fcf738fe157cf1145a526560830d91a217a1ab0945f8a11fa7a022934e1ba099e58c8", 0x50000004, &(0x7f00000003c0)="d8e7cbae5ea51b8bb76d2d48afed1cba46668e8384b59497366bd1e85f85af9d06118e2e1e739f8b84bd8fc1093a70dfd3af", {[0x6]}}, &(0x7f00000004c0)={&(0x7f0000000440)="b7683149dbeebaaf1a886ca7574044f76128357d7f3a393f921dca2f4cd059df5d37ba163dbfa6c07b9a9b598ed7d8c29e7a", 0x0, &(0x7f0000000480)="74c925774c617ddcc90d36d5e28abdd2d345cc954607591960893bc50cb26554bb26a6eb863900d649a33c03b95223f290cc"}, 0x8, &(0x7f0000000500)) 06:28:13 executing program 1: r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) accept4$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30000000"], 0x20}}, 0x0) 06:28:13 executing program 1: accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30000000"], 0x20}}, 0x0) 06:28:13 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0xc0080) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)={r1}) 06:28:13 executing program 0: syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0xffffffffffffffd3) 06:28:13 executing program 2: r0 = syz_clone(0xa0028200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r1) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r4, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x4000000) (async, rerun: 64) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000002}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x34, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PID={0x8, 0x1c, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40080) 06:28:13 executing program 5: rt_sigaction(0x0, &(0x7f0000000400)={&(0x7f0000000000)="852d2de2bcf5ef59ee67b0ebd0edd85fcf738fe157cf1145a526560830d91a217a1ab0945f8a11fa7a022934e1ba099e58c8", 0x50000004, &(0x7f00000003c0)="d8e7cbae5ea51b8bb76d2d48afed1cba46668e8384b59497366bd1e85f85af9d06118e2e1e739f8b84bd8fc1093a70dfd3af", {[0x6]}}, &(0x7f00000004c0)={&(0x7f0000000440)="b7683149dbeebaaf1a886ca7574044f76128357d7f3a393f921dca2f4cd059df5d37ba163dbfa6c07b9a9b598ed7d8c29e7a", 0x0, &(0x7f0000000480)="74c925774c617ddcc90d36d5e28abdd2d345cc954607591960893bc50cb26554bb26a6eb863900d649a33c03b95223f290cc"}, 0x8, &(0x7f0000000500)) 06:28:13 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x10000) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x0, r1}) r2 = syz_clone(0x8186a480, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x8, &(0x7f0000000000)) pipe2(&(0x7f0000000040), 0x10000) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x0, r1}) (async) syz_clone(0x8186a480, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x8, &(0x7f0000000000)) (async) 06:28:13 executing program 5: rt_sigaction(0x0, &(0x7f0000000400)={&(0x7f0000000000)="852d2de2bcf5ef59ee67b0ebd0edd85fcf738fe157cf1145a526560830d91a217a1ab0945f8a11fa7a022934e1ba099e58c8", 0x50000004, &(0x7f00000003c0)="d8e7cbae5ea51b8bb76d2d48afed1cba46668e8384b59497366bd1e85f85af9d06118e2e1e739f8b84bd8fc1093a70dfd3af", {[0x6]}}, &(0x7f00000004c0)={&(0x7f0000000440)="b7683149dbeebaaf1a886ca7574044f76128357d7f3a393f921dca2f4cd059df5d37ba163dbfa6c07b9a9b598ed7d8c29e7a", 0x0, &(0x7f0000000480)="74c925774c617ddcc90d36d5e28abdd2d345cc954607591960893bc50cb26554bb26a6eb863900d649a33c03b95223f290cc"}, 0x8, &(0x7f0000000500)) 06:28:13 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30000000"], 0x20}}, 0x0) [ 1073.010419][ T6410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:13 executing program 5: rt_sigaction(0x0, &(0x7f0000000400)={&(0x7f0000000000)="852d2de2bcf5ef59ee67b0ebd0edd85fcf738fe157cf1145a526560830d91a217a1ab0945f8a11fa7a022934e1ba099e58c8", 0x50000004, &(0x7f00000003c0)="d8e7cbae5ea51b8bb76d2d48afed1cba46668e8384b59497366bd1e85f85af9d06118e2e1e739f8b84bd8fc1093a70dfd3af", {[0x6]}}, &(0x7f00000004c0)={&(0x7f0000000440)="b7683149dbeebaaf1a886ca7574044f76128357d7f3a393f921dca2f4cd059df5d37ba163dbfa6c07b9a9b598ed7d8c29e7a", 0x0, &(0x7f0000000480)="74c925774c617ddcc90d36d5e28abdd2d345cc954607591960893bc50cb26554bb26a6eb863900d649a33c03b95223f290cc"}, 0x8, &(0x7f0000000500)) 06:28:13 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30000000"], 0x20}}, 0x0) 06:28:13 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x10000) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x0, r1}) r2 = syz_clone(0x8186a480, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x8, &(0x7f0000000000)) (async) ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x8, &(0x7f0000000000)) 06:28:13 executing program 5: rt_sigaction(0x13, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)="b7683149dbeebaaf1a886ca7574044f76128357d7f3a393f921dca2f4cd059df5d37ba163dbfa6c07b9a9b598ed7d8c29e7a", 0x0, &(0x7f0000000480)="74c925774c617ddcc90d36d5e28abdd2d345cc954607591960893bc50cb26554bb26a6eb863900d649a33c03b95223f290cc"}, 0x8, &(0x7f0000000500)) 06:28:13 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30000000"], 0x20}}, 0x0) 06:28:13 executing program 0: syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0xffffffffffffffd3) 06:28:13 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async, rerun: 32) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0xc0080) (rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)={r1}) 06:28:13 executing program 2: r0 = syz_clone(0xa0028200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r1) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r3) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r4, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x4000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000002}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x34, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PID={0x8, 0x1c, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40080) 06:28:13 executing program 5: rt_sigaction(0x13, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)="b7683149dbeebaaf1a886ca7574044f76128357d7f3a393f921dca2f4cd059df5d37ba163dbfa6c07b9a9b598ed7d8c29e7a", 0x0, &(0x7f0000000480)="74c925774c617ddcc90d36d5e28abdd2d345cc954607591960893bc50cb26554bb26a6eb863900d649a33c03b95223f290cc"}, 0x8, &(0x7f0000000500)) 06:28:13 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30000000"], 0x20}}, 0x0) 06:28:13 executing program 4: syz_clone(0x4807000, 0x0, 0xfffffffffffffee9, 0x0, 0x0, 0x0) 06:28:13 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30000000"], 0x20}}, 0x0) 06:28:13 executing program 5: rt_sigaction(0x13, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)="b7683149dbeebaaf1a886ca7574044f76128357d7f3a393f921dca2f4cd059df5d37ba163dbfa6c07b9a9b598ed7d8c29e7a", 0x0, &(0x7f0000000480)="74c925774c617ddcc90d36d5e28abdd2d345cc954607591960893bc50cb26554bb26a6eb863900d649a33c03b95223f290cc"}, 0x8, &(0x7f0000000500)) [ 1073.413646][ T6449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1073.426983][ T6449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:14 executing program 4: syz_clone(0x4807000, 0x0, 0xfffffffffffffee9, 0x0, 0x0, 0x0) [ 1073.443857][ T6449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1073.456393][ T6449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1073.470117][ T6449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:14 executing program 5: rt_sigaction(0x13, &(0x7f0000000400)={0x0, 0x50000004, &(0x7f00000003c0)="d8e7cbae5ea51b8bb76d2d48afed1cba46668e8384b59497366bd1e85f85af9d06118e2e1e739f8b84bd8fc1093a70dfd3af", {[0x6]}}, &(0x7f00000004c0)={&(0x7f0000000440)="b7683149dbeebaaf1a886ca7574044f76128357d7f3a393f921dca2f4cd059df5d37ba163dbfa6c07b9a9b598ed7d8c29e7a", 0x0, &(0x7f0000000480)="74c925774c617ddcc90d36d5e28abdd2d345cc954607591960893bc50cb26554bb26a6eb863900d649a33c03b95223f290cc"}, 0x8, &(0x7f0000000500)) [ 1073.487784][ T6449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:14 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30000000"], 0x20}}, 0x0) [ 1073.508431][ T6449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1073.525995][ T6449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1073.540388][ T6449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:14 executing program 4: syz_clone(0x4807000, 0x0, 0xfffffffffffffee9, 0x0, 0x0, 0x0) [ 1073.550836][ T6449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1073.564741][ T6449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1073.594456][ T6449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1073.597582][ T6449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1073.600490][ T6449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1073.620329][ T6449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:14 executing program 0: syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0xffffffffffffffd3) syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0xffffffffffffffd3) (async) [ 1073.643743][ T6449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1073.651386][ T6449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1073.660479][ T6449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1073.665251][ T6449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1073.668345][ T6449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1073.672028][ T6449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1073.681630][ T6449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1073.686384][ T6449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1073.689734][ T6449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1073.692877][ T6449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1073.706494][ T6449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1073.710828][ T6449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1073.718588][ T6449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1073.721836][ T6449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1073.729078][ T6449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1073.732450][ T6449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1073.740003][ T6449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1073.745497][ T6449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:14 executing program 3: syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0) 06:28:14 executing program 5: rt_sigaction(0x13, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)="d8e7cbae5ea51b8bb76d2d48afed1cba46668e8384b59497366bd1e85f85af9d06118e2e1e739f8b84bd8fc1093a70dfd3af", {[0x6]}}, &(0x7f00000004c0)={&(0x7f0000000440)="b7683149dbeebaaf1a886ca7574044f76128357d7f3a393f921dca2f4cd059df5d37ba163dbfa6c07b9a9b598ed7d8c29e7a", 0x0, &(0x7f0000000480)="74c925774c617ddcc90d36d5e28abdd2d345cc954607591960893bc50cb26554bb26a6eb863900d649a33c03b95223f290cc"}, 0x8, &(0x7f0000000500)) 06:28:14 executing program 4: syz_clone(0x80028100, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:14 executing program 2: r0 = syz_clone(0xa0038000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r1, 0x9d27, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r2, 0x9d27, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r3, 0x9d27, 0x0, 0x0) r4 = getpgid(r0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r5, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r8, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r9, 0x21, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r7, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4040040) getpgid(r4) 06:28:14 executing program 0: syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x5f) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x21c0, 0x101000) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000280)={0x0, 0x3, &(0x7f00000001c0)=[0x8, 0x1ff, 0x4], &(0x7f0000000200)=[0x2, 0x0, 0x7, 0x7, 0x8, 0x9, 0x400], &(0x7f0000000240)=[0x400, 0x0, 0x2, 0x0, 0x9d48]}) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=ANY=[@ANYBLOB="f8bb0500080211000000ffffffffffffffffffffffff0328080211000000080988b40100080211000000080211000001f083767d61f58e0098047e00d340096888d59d56a1eb33b3d859d6ef58432b106a12872ef37a6bb48ae369e766cd2b724ab488ce2a1beda6cea3748713168850019297595140f565dc90675943a051c7df250c1cf05a6d81730768d9cf69fa50beb57110e663718813f2d3cd867b9b8326266ab2080b341f96f8765ef8392da1dd291f51931d299bb8c29bbfb240eb536582af79dd120aeb1b886fdc87d19fe5d83d0319946a3a1fbab3afc8c16e7207e2d4455f396643bc25ac467c138ebde06488"], 0xf2) 06:28:14 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30000000"], 0x20}}, 0x0) [ 1074.108755][ T6471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:14 executing program 5: rt_sigaction(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, {[0x6]}}, &(0x7f00000004c0)={&(0x7f0000000440)="b7683149dbeebaaf1a886ca7574044f76128357d7f3a393f921dca2f4cd059df5d37ba163dbfa6c07b9a9b598ed7d8c29e7a", 0x0, &(0x7f0000000480)="74c925774c617ddcc90d36d5e28abdd2d345cc954607591960893bc50cb26554bb26a6eb863900d649a33c03b95223f290cc"}, 0x8, &(0x7f0000000500)) 06:28:14 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30000000"], 0x20}}, 0x0) [ 1074.127044][ T6481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:14 executing program 4: syz_clone(0x80028100, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:14 executing program 5: rt_sigaction(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f00000004c0)={&(0x7f0000000440)="b7683149dbeebaaf1a886ca7574044f76128357d7f3a393f921dca2f4cd059df5d37ba163dbfa6c07b9a9b598ed7d8c29e7a", 0x0, &(0x7f0000000480)="74c925774c617ddcc90d36d5e28abdd2d345cc954607591960893bc50cb26554bb26a6eb863900d649a33c03b95223f290cc"}, 0x8, &(0x7f0000000500)) 06:28:14 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30000000"], 0x20}}, 0x0) 06:28:14 executing program 2: syz_clone(0xa0038000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = syz_clone(0xa0038000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r1, 0x9d27, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r2, 0x9d27, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r3, 0x9d27, 0x0, 0x0) r4 = getpgid(r0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r5, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r6) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r8, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) pipe2$watch_queue(&(0x7f0000000400), 0x80) (async) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r9, 0x21, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r7, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4040040) getpgid(r4) (async) getpgid(r4) 06:28:15 executing program 4: syz_clone(0x80028100, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:15 executing program 3: syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0) (async) 06:28:15 executing program 5: rt_sigaction(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000500)) 06:28:15 executing program 0: syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x5f) (async) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x21c0, 0x101000) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000280)={0x0, 0x3, &(0x7f00000001c0)=[0x8, 0x1ff, 0x4], &(0x7f0000000200)=[0x2, 0x0, 0x7, 0x7, 0x8, 0x9, 0x400], &(0x7f0000000240)=[0x400, 0x0, 0x2, 0x0, 0x9d48]}) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=ANY=[@ANYBLOB="f8bb0500080211000000ffffffffffffffffffffffff0328080211000000080988b40100080211000000080211000001f083767d61f58e0098047e00d340096888d59d56a1eb33b3d859d6ef58432b106a12872ef37a6bb48ae369e766cd2b724ab488ce2a1beda6cea3748713168850019297595140f565dc90675943a051c7df250c1cf05a6d81730768d9cf69fa50beb57110e663718813f2d3cd867b9b8326266ab2080b341f96f8765ef8392da1dd291f51931d299bb8c29bbfb240eb536582af79dd120aeb1b886fdc87d19fe5d83d0319946a3a1fbab3afc8c16e7207e2d4455f396643bc25ac467c138ebde06488"], 0xf2) 06:28:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30000000"], 0x20}}, 0x0) 06:28:15 executing program 2: r0 = syz_clone(0xa0038000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r1, 0x9d27, 0x0, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r2, 0x9d27, 0x0, 0x0) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r3, 0x9d27, 0x0, 0x0) (async) r4 = getpgid(r0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r5, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r8, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) (async) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r9, 0x21, 0x0, 0x0, 0x0) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r7, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4040040) getpgid(r4) 06:28:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, 0x0, 0x0) 06:28:15 executing program 4: rt_sigaction(0x11, &(0x7f0000000080)={&(0x7f0000000000)="b2f5adde341c117e8e76af94b3fbffb9d28834464e0b09dc394373d5cd112b88d469ef3f72dd3eff7144a59ffd43a3d82e83", 0xc8000007, &(0x7f0000000040)="6d9d7883014f84ed948713a5cc156a9e8a502b7dffa12d25860aace1ba09c19ad447a132952efa64f0154e2de5e1c9f22553", {[0x9]}}, &(0x7f0000000140)={&(0x7f00000000c0)="9a3c4f83c809c266c0e66fd9c4fb3db5a3698aca87b9b918d6ca4eefd1d6c03dc0a20cce65f2be8fce7e1e8e99e9d57af7e2", 0x0, &(0x7f0000000100)="f1f6d39231dabe573ee0026b4df17898cc7926c7bc3ab12606b32fbfb53204a13fae3fff82ca222847d5436dd483a1f920a0"}, 0x8, &(0x7f0000000180)) rt_sigaction(0x0, &(0x7f0000000240)={&(0x7f00000001c0)="8fdf919c8b14ebea9e7e11e3fd2a1f410960bfaea564ca3e8f5913e7e7627555714424941b86504ac4cdbab377e697119d11", 0x8000001, &(0x7f0000000200)="b01368f529b47c3bcf7f69d163d83a59e2840ce1dca6fe7a3338be692de382e41f78b1b3adff54e0bfdc6e2218117eb46b2a", {[0x100000001]}}, &(0x7f0000000300)={&(0x7f0000000280)="9618463760c182b6603777e3fa5e881a7800ea28388b2b78534f6d97b77cc91b070787a32a5c52ab99c6e3973215fc13f7c7", 0x0, &(0x7f00000002c0)="aa4070010d04fcf460c06e73e4690b5234d40e9d48240f66b7b70f259a5be99cd1848821d7cf6e34825e0d474a362a42ebb4"}, 0x8, &(0x7f0000000340)) syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1074.543986][ T6518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:15 executing program 5: rt_sigaction(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0) [ 1074.554207][ T6518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1074.569814][ T6508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:15 executing program 4: rt_sigaction(0x11, &(0x7f0000000080)={&(0x7f0000000000)="b2f5adde341c117e8e76af94b3fbffb9d28834464e0b09dc394373d5cd112b88d469ef3f72dd3eff7144a59ffd43a3d82e83", 0xc8000007, &(0x7f0000000040)="6d9d7883014f84ed948713a5cc156a9e8a502b7dffa12d25860aace1ba09c19ad447a132952efa64f0154e2de5e1c9f22553", {[0x9]}}, &(0x7f0000000140)={&(0x7f00000000c0)="9a3c4f83c809c266c0e66fd9c4fb3db5a3698aca87b9b918d6ca4eefd1d6c03dc0a20cce65f2be8fce7e1e8e99e9d57af7e2", 0x0, &(0x7f0000000100)="f1f6d39231dabe573ee0026b4df17898cc7926c7bc3ab12606b32fbfb53204a13fae3fff82ca222847d5436dd483a1f920a0"}, 0x8, &(0x7f0000000180)) (async) rt_sigaction(0x0, &(0x7f0000000240)={&(0x7f00000001c0)="8fdf919c8b14ebea9e7e11e3fd2a1f410960bfaea564ca3e8f5913e7e7627555714424941b86504ac4cdbab377e697119d11", 0x8000001, &(0x7f0000000200)="b01368f529b47c3bcf7f69d163d83a59e2840ce1dca6fe7a3338be692de382e41f78b1b3adff54e0bfdc6e2218117eb46b2a", {[0x100000001]}}, &(0x7f0000000300)={&(0x7f0000000280)="9618463760c182b6603777e3fa5e881a7800ea28388b2b78534f6d97b77cc91b070787a32a5c52ab99c6e3973215fc13f7c7", 0x0, &(0x7f00000002c0)="aa4070010d04fcf460c06e73e4690b5234d40e9d48240f66b7b70f259a5be99cd1848821d7cf6e34825e0d474a362a42ebb4"}, 0x8, &(0x7f0000000340)) (async) syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, 0x0, 0x0) 06:28:15 executing program 2: sched_getattr(0x0, &(0x7f0000000380)={0x38}, 0x38, 0x0) r0 = syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x284000, &(0x7f0000000000)="e2584b0bf0ec1b1a57fb1a8e65feaefd9cb752914dd6340d577f187d09c4ad74818d4099744bf6461fa4e2d9874b2c9b6f870abbc190ecd8ee574fb5aabedcce9e4bdffae61080bdb4e7bf0ee06965c82dc3a1acb5238f53ce2fbf31cd277335760b15cbf41c85213eb8def1240c556650226680eed18d6534ed38bfd793f05d49830b43178745571a6a2d2ce90c96144a", 0x91, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="04e2a04b0af7f54d6b2e1d11ba24f1a94ca1a63d57b79cf0fd0128288b6d91ddf07368df2def3fb8cc45eaeaa6d9d8b7fa89cf23644a7bf153bb6378fc36cc4d5ef025849af5f52435870529dd8ea810bf8aa22b012893318811ec16fb89a45eb4193f5595b00008ac621404a056385f9dc2fb6bbc66789fdc04be980bbdd5216a7c8391e6a6a94d034d832ba9407198f1b828bdaec79b33eb842bb5441f52670b4f408205d6f5828bf2ac46f7877f5d114393d23aea1a9c76eea29212d76488630cc7607deda62733e9ca") ptrace$setregset(0x4205, r0, 0x202, &(0x7f0000000340)={&(0x7f0000000240)="c8e86efe80a2b3560fd33ca74bcaf473d4e904e3360fe48729862d857a676eb8a6462c37e9e60b7532fe85097d34a9a93744b7defafa0e7715337edf188ca22b23e5bf58cb24c8a0213b0a5d3869829453f1d5ac47451b0be57bd16fff37ba4c948b3e3dd165e4405408bb9e2ee159961c87e47acafd6ab3308d238ea600a6a60d59aced20e59f3ed37fda4e4e091a4e72436960a7586e284f604dd5cfe86ae38b8218c277513e54026541045d2cda2d28f2bb57610cb496758224c02c36febd62a68880fd876806", 0xc8}) 06:28:15 executing program 5: rt_sigaction(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0) 06:28:15 executing program 4: rt_sigaction(0x11, &(0x7f0000000080)={&(0x7f0000000000)="b2f5adde341c117e8e76af94b3fbffb9d28834464e0b09dc394373d5cd112b88d469ef3f72dd3eff7144a59ffd43a3d82e83", 0xc8000007, &(0x7f0000000040)="6d9d7883014f84ed948713a5cc156a9e8a502b7dffa12d25860aace1ba09c19ad447a132952efa64f0154e2de5e1c9f22553", {[0x9]}}, &(0x7f0000000140)={&(0x7f00000000c0)="9a3c4f83c809c266c0e66fd9c4fb3db5a3698aca87b9b918d6ca4eefd1d6c03dc0a20cce65f2be8fce7e1e8e99e9d57af7e2", 0x0, &(0x7f0000000100)="f1f6d39231dabe573ee0026b4df17898cc7926c7bc3ab12606b32fbfb53204a13fae3fff82ca222847d5436dd483a1f920a0"}, 0x8, &(0x7f0000000180)) rt_sigaction(0x0, &(0x7f0000000240)={&(0x7f00000001c0)="8fdf919c8b14ebea9e7e11e3fd2a1f410960bfaea564ca3e8f5913e7e7627555714424941b86504ac4cdbab377e697119d11", 0x8000001, &(0x7f0000000200)="b01368f529b47c3bcf7f69d163d83a59e2840ce1dca6fe7a3338be692de382e41f78b1b3adff54e0bfdc6e2218117eb46b2a", {[0x100000001]}}, &(0x7f0000000300)={&(0x7f0000000280)="9618463760c182b6603777e3fa5e881a7800ea28388b2b78534f6d97b77cc91b070787a32a5c52ab99c6e3973215fc13f7c7", 0x0, &(0x7f00000002c0)="aa4070010d04fcf460c06e73e4690b5234d40e9d48240f66b7b70f259a5be99cd1848821d7cf6e34825e0d474a362a42ebb4"}, 0x8, &(0x7f0000000340)) syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:15 executing program 3: syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0) 06:28:15 executing program 4: syz_clone(0x800, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x9d27, 0x0, 0x0) ptrace$setregset(0x4205, r0, 0x2, &(0x7f0000000040)={&(0x7f0000000000)="ba48ad99063012f19bb643ac5c8329896effc0516edc917c4a65d6ade0d87c03d86b02576a8ec6a62946f068c5357a5a", 0x30}) 06:28:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, 0x0, 0x0) 06:28:15 executing program 0: syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x5f) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x21c0, 0x101000) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000280)={0x0, 0x3, &(0x7f00000001c0)=[0x8, 0x1ff, 0x4], &(0x7f0000000200)=[0x2, 0x0, 0x7, 0x7, 0x8, 0x9, 0x400], &(0x7f0000000240)=[0x400, 0x0, 0x2, 0x0, 0x9d48]}) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=ANY=[@ANYBLOB="f8bb0500080211000000ffffffffffffffffffffffff0328080211000000080988b40100080211000000080211000001f083767d61f58e0098047e00d340096888d59d56a1eb33b3d859d6ef58432b106a12872ef37a6bb48ae369e766cd2b724ab488ce2a1beda6cea3748713168850019297595140f565dc90675943a051c7df250c1cf05a6d81730768d9cf69fa50beb57110e663718813f2d3cd867b9b8326266ab2080b341f96f8765ef8392da1dd291f51931d299bb8c29bbfb240eb536582af79dd120aeb1b886fdc87d19fe5d83d0319946a3a1fbab3afc8c16e7207e2d4455f396643bc25ac467c138ebde06488"], 0xf2) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x5f) (async) syz_open_dev$dri(&(0x7f0000000180), 0x21c0, 0x101000) (async) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000280)={0x0, 0x3, &(0x7f00000001c0)=[0x8, 0x1ff, 0x4], &(0x7f0000000200)=[0x2, 0x0, 0x7, 0x7, 0x8, 0x9, 0x400], &(0x7f0000000240)=[0x400, 0x0, 0x2, 0x0, 0x9d48]}) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=ANY=[@ANYBLOB="f8bb0500080211000000ffffffffffffffffffffffff0328080211000000080988b40100080211000000080211000001f083767d61f58e0098047e00d340096888d59d56a1eb33b3d859d6ef58432b106a12872ef37a6bb48ae369e766cd2b724ab488ce2a1beda6cea3748713168850019297595140f565dc90675943a051c7df250c1cf05a6d81730768d9cf69fa50beb57110e663718813f2d3cd867b9b8326266ab2080b341f96f8765ef8392da1dd291f51931d299bb8c29bbfb240eb536582af79dd120aeb1b886fdc87d19fe5d83d0319946a3a1fbab3afc8c16e7207e2d4455f396643bc25ac467c138ebde06488"], 0xf2) (async) 06:28:15 executing program 5: rt_sigaction(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0) 06:28:15 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, 0x0, 0x0) 06:28:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) [ 1074.963514][ T6559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1074.998640][ T6558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:15 executing program 0: syz_80211_inject_frame(&(0x7f0000000040), 0x0, 0x0) 06:28:15 executing program 4: syz_clone(0x800, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x9d27, 0x0, 0x0) ptrace$setregset(0x4205, r0, 0x2, &(0x7f0000000040)={&(0x7f0000000000)="ba48ad99063012f19bb643ac5c8329896effc0516edc917c4a65d6ade0d87c03d86b02576a8ec6a62946f068c5357a5a", 0x30}) syz_clone(0x800, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) migrate_pages(r0, 0x9d27, 0x0, 0x0) (async) ptrace$setregset(0x4205, r0, 0x2, &(0x7f0000000040)={&(0x7f0000000000)="ba48ad99063012f19bb643ac5c8329896effc0516edc917c4a65d6ade0d87c03d86b02576a8ec6a62946f068c5357a5a", 0x30}) (async) [ 1075.071099][ T6567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:15 executing program 2: sched_getattr(0x0, &(0x7f0000000380)={0x38}, 0x38, 0x0) r0 = syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x284000, &(0x7f0000000000)="e2584b0bf0ec1b1a57fb1a8e65feaefd9cb752914dd6340d577f187d09c4ad74818d4099744bf6461fa4e2d9874b2c9b6f870abbc190ecd8ee574fb5aabedcce9e4bdffae61080bdb4e7bf0ee06965c82dc3a1acb5238f53ce2fbf31cd277335760b15cbf41c85213eb8def1240c556650226680eed18d6534ed38bfd793f05d49830b43178745571a6a2d2ce90c96144a", 0x91, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="04e2a04b0af7f54d6b2e1d11ba24f1a94ca1a63d57b79cf0fd0128288b6d91ddf07368df2def3fb8cc45eaeaa6d9d8b7fa89cf23644a7bf153bb6378fc36cc4d5ef025849af5f52435870529dd8ea810bf8aa22b012893318811ec16fb89a45eb4193f5595b00008ac621404a056385f9dc2fb6bbc66789fdc04be980bbdd5216a7c8391e6a6a94d034d832ba9407198f1b828bdaec79b33eb842bb5441f52670b4f408205d6f5828bf2ac46f7877f5d114393d23aea1a9c76eea29212d76488630cc7607deda62733e9ca") ptrace$setregset(0x4205, r0, 0x202, &(0x7f0000000340)={&(0x7f0000000240)="c8e86efe80a2b3560fd33ca74bcaf473d4e904e3360fe48729862d857a676eb8a6462c37e9e60b7532fe85097d34a9a93744b7defafa0e7715337edf188ca22b23e5bf58cb24c8a0213b0a5d3869829453f1d5ac47451b0be57bd16fff37ba4c948b3e3dd165e4405408bb9e2ee159961c87e47acafd6ab3308d238ea600a6a60d59aced20e59f3ed37fda4e4e091a4e72436960a7586e284f604dd5cfe86ae38b8218c277513e54026541045d2cda2d28f2bb57610cb496758224c02c36febd62a68880fd876806", 0xc8}) sched_getattr(0x0, &(0x7f0000000380)={0x38}, 0x38, 0x0) (async) syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x284000, &(0x7f0000000000)="e2584b0bf0ec1b1a57fb1a8e65feaefd9cb752914dd6340d577f187d09c4ad74818d4099744bf6461fa4e2d9874b2c9b6f870abbc190ecd8ee574fb5aabedcce9e4bdffae61080bdb4e7bf0ee06965c82dc3a1acb5238f53ce2fbf31cd277335760b15cbf41c85213eb8def1240c556650226680eed18d6534ed38bfd793f05d49830b43178745571a6a2d2ce90c96144a", 0x91, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="04e2a04b0af7f54d6b2e1d11ba24f1a94ca1a63d57b79cf0fd0128288b6d91ddf07368df2def3fb8cc45eaeaa6d9d8b7fa89cf23644a7bf153bb6378fc36cc4d5ef025849af5f52435870529dd8ea810bf8aa22b012893318811ec16fb89a45eb4193f5595b00008ac621404a056385f9dc2fb6bbc66789fdc04be980bbdd5216a7c8391e6a6a94d034d832ba9407198f1b828bdaec79b33eb842bb5441f52670b4f408205d6f5828bf2ac46f7877f5d114393d23aea1a9c76eea29212d76488630cc7607deda62733e9ca") (async) ptrace$setregset(0x4205, r0, 0x202, &(0x7f0000000340)={&(0x7f0000000240)="c8e86efe80a2b3560fd33ca74bcaf473d4e904e3360fe48729862d857a676eb8a6462c37e9e60b7532fe85097d34a9a93744b7defafa0e7715337edf188ca22b23e5bf58cb24c8a0213b0a5d3869829453f1d5ac47451b0be57bd16fff37ba4c948b3e3dd165e4405408bb9e2ee159961c87e47acafd6ab3308d238ea600a6a60d59aced20e59f3ed37fda4e4e091a4e72436960a7586e284f604dd5cfe86ae38b8218c277513e54026541045d2cda2d28f2bb57610cb496758224c02c36febd62a68880fd876806", 0xc8}) (async) 06:28:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 06:28:15 executing program 5: syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x5f) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x21c0, 0x101000) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000280)={0x0, 0x3, &(0x7f00000001c0)=[0x8, 0x1ff, 0x4], &(0x7f0000000200)=[0x2, 0x0, 0x7, 0x7, 0x8, 0x9, 0x400], &(0x7f0000000240)=[0x400, 0x0, 0x2, 0x0, 0x9d48]}) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=ANY=[@ANYBLOB="f8bb0500080211000000ffffffffffffffffffffffff0328080211000000080988b40100080211000000080211000001f083767d61f58e0098047e00d340096888d59d56a1eb33b3d859d6ef58432b106a12872ef37a6bb48ae369e766cd2b724ab488ce2a1beda6cea3748713168850019297595140f565dc90675943a051c7df250c1cf05a6d81730768d9cf69fa50beb57110e663718813f2d3cd867b9b8326266ab2080b341f96f8765ef8392da1dd291f51931d299bb8c29bbfb240eb536582af79dd120aeb1b886fdc87d19fe5d83d0319946a3a1fbab3afc8c16e7207e2d4455f396643bc25ac467c138ebde06488"], 0xf2) [ 1075.156484][ T6573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:15 executing program 4: syz_clone(0x800, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x9d27, 0x0, 0x0) ptrace$setregset(0x4205, r0, 0x2, &(0x7f0000000040)={&(0x7f0000000000)="ba48ad99063012f19bb643ac5c8329896effc0516edc917c4a65d6ade0d87c03d86b02576a8ec6a62946f068c5357a5a", 0x30}) syz_clone(0x800, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) migrate_pages(r0, 0x9d27, 0x0, 0x0) (async) ptrace$setregset(0x4205, r0, 0x2, &(0x7f0000000040)={&(0x7f0000000000)="ba48ad99063012f19bb643ac5c8329896effc0516edc917c4a65d6ade0d87c03d86b02576a8ec6a62946f068c5357a5a", 0x30}) (async) 06:28:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 06:28:15 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ded8bb650a11b475", @ANYRES16=r1, @ANYBLOB="01000000000000000000090000000500080000000000"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="040835bdcf08fddbdf2509000000180007000500000008005900", @ANYRES32=0x0, @ANYBLOB="080001000200000008000300", @ANYRES32=r3, @ANYBLOB="0800010000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x4) r4 = syz_open_dev$vcsa(&(0x7f0000000040), 0x4, 0x10800) r5 = io_uring_setup(0x6f76, &(0x7f0000000340)={0x0, 0xe342, 0x800, 0x1, 0x3b9, 0x0, r4}) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r7, 0x21, 0x0, 0x0, 0x0) bind$phonet(r7, &(0x7f0000000180)={0x23, 0x1f, 0x81, 0x7f}, 0x10) setsockopt$inet6_dccp_buf(r6, 0x21, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000100)=r6, 0x1) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x90000) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r6) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000802}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r9, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x2) syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0) 06:28:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x20}}, 0x0) 06:28:15 executing program 2: sched_getattr(0x0, &(0x7f0000000380)={0x38}, 0x38, 0x0) r0 = syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x284000, &(0x7f0000000000)="e2584b0bf0ec1b1a57fb1a8e65feaefd9cb752914dd6340d577f187d09c4ad74818d4099744bf6461fa4e2d9874b2c9b6f870abbc190ecd8ee574fb5aabedcce9e4bdffae61080bdb4e7bf0ee06965c82dc3a1acb5238f53ce2fbf31cd277335760b15cbf41c85213eb8def1240c556650226680eed18d6534ed38bfd793f05d49830b43178745571a6a2d2ce90c96144a", 0x91, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="04e2a04b0af7f54d6b2e1d11ba24f1a94ca1a63d57b79cf0fd0128288b6d91ddf07368df2def3fb8cc45eaeaa6d9d8b7fa89cf23644a7bf153bb6378fc36cc4d5ef025849af5f52435870529dd8ea810bf8aa22b012893318811ec16fb89a45eb4193f5595b00008ac621404a056385f9dc2fb6bbc66789fdc04be980bbdd5216a7c8391e6a6a94d034d832ba9407198f1b828bdaec79b33eb842bb5441f52670b4f408205d6f5828bf2ac46f7877f5d114393d23aea1a9c76eea29212d76488630cc7607deda62733e9ca") (async) syz_clone(0x284000, &(0x7f0000000000)="e2584b0bf0ec1b1a57fb1a8e65feaefd9cb752914dd6340d577f187d09c4ad74818d4099744bf6461fa4e2d9874b2c9b6f870abbc190ecd8ee574fb5aabedcce9e4bdffae61080bdb4e7bf0ee06965c82dc3a1acb5238f53ce2fbf31cd277335760b15cbf41c85213eb8def1240c556650226680eed18d6534ed38bfd793f05d49830b43178745571a6a2d2ce90c96144a", 0x91, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="04e2a04b0af7f54d6b2e1d11ba24f1a94ca1a63d57b79cf0fd0128288b6d91ddf07368df2def3fb8cc45eaeaa6d9d8b7fa89cf23644a7bf153bb6378fc36cc4d5ef025849af5f52435870529dd8ea810bf8aa22b012893318811ec16fb89a45eb4193f5595b00008ac621404a056385f9dc2fb6bbc66789fdc04be980bbdd5216a7c8391e6a6a94d034d832ba9407198f1b828bdaec79b33eb842bb5441f52670b4f408205d6f5828bf2ac46f7877f5d114393d23aea1a9c76eea29212d76488630cc7607deda62733e9ca") ptrace$setregset(0x4205, r0, 0x202, &(0x7f0000000340)={&(0x7f0000000240)="c8e86efe80a2b3560fd33ca74bcaf473d4e904e3360fe48729862d857a676eb8a6462c37e9e60b7532fe85097d34a9a93744b7defafa0e7715337edf188ca22b23e5bf58cb24c8a0213b0a5d3869829453f1d5ac47451b0be57bd16fff37ba4c948b3e3dd165e4405408bb9e2ee159961c87e47acafd6ab3308d238ea600a6a60d59aced20e59f3ed37fda4e4e091a4e72436960a7586e284f604dd5cfe86ae38b8218c277513e54026541045d2cda2d28f2bb57610cb496758224c02c36febd62a68880fd876806", 0xc8}) [ 1075.351059][ T6594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:15 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) syz_clone(0x981bc200, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x20}}, 0x0) 06:28:15 executing program 0: syz_80211_inject_frame(&(0x7f0000000040), 0x0, 0x0) 06:28:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x20}}, 0x0) [ 1075.422352][ T6606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:16 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) syz_clone(0x981bc200, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:16 executing program 5: syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x5f) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x21c0, 0x101000) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000280)={0x0, 0x3, &(0x7f00000001c0)=[0x8, 0x1ff, 0x4], &(0x7f0000000200)=[0x2, 0x0, 0x7, 0x7, 0x8, 0x9, 0x400], &(0x7f0000000240)=[0x400, 0x0, 0x2, 0x0, 0x9d48]}) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=ANY=[@ANYBLOB="f8bb0500080211000000ffffffffffffffffffffffff0328080211000000080988b40100080211000000080211000001f083767d61f58e0098047e00d340096888d59d56a1eb33b3d859d6ef58432b106a12872ef37a6bb48ae369e766cd2b724ab488ce2a1beda6cea3748713168850019297595140f565dc90675943a051c7df250c1cf05a6d81730768d9cf69fa50beb57110e663718813f2d3cd867b9b8326266ab2080b341f96f8765ef8392da1dd291f51931d299bb8c29bbfb240eb536582af79dd120aeb1b886fdc87d19fe5d83d0319946a3a1fbab3afc8c16e7207e2d4455f396643bc25ac467c138ebde06488"], 0xf2) 06:28:16 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) (async, rerun: 64) syz_clone(0x981bc200, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) 06:28:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2], 0x20}}, 0x0) [ 1075.532595][ T6617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:16 executing program 4: pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0xd, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000000)) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000040)) syz_clone(0x92178f80, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:16 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ded8bb650a11b475", @ANYRES16=r1, @ANYBLOB="01000000000000000000090000000500080000000000"], 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="040835bdcf08fddbdf2509000000180007000500000008005900", @ANYRES32=0x0, @ANYBLOB="080001000200000008000300", @ANYRES32=r3, @ANYBLOB="0800010000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x4) (async) r4 = syz_open_dev$vcsa(&(0x7f0000000040), 0x4, 0x10800) r5 = io_uring_setup(0x6f76, &(0x7f0000000340)={0x0, 0xe342, 0x800, 0x1, 0x3b9, 0x0, r4}) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r7, 0x21, 0x0, 0x0, 0x0) (async) bind$phonet(r7, &(0x7f0000000180)={0x23, 0x1f, 0x81, 0x7f}, 0x10) setsockopt$inet6_dccp_buf(r6, 0x21, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000100)=r6, 0x1) (async) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x90000) (async) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r6) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000802}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r9, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x2) (async) syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0) 06:28:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2], 0x20}}, 0x0) 06:28:16 executing program 4: pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0xd, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000040)) syz_clone(0x92178f80, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2], 0x20}}, 0x0) [ 1075.726440][ T6635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:16 executing program 0: syz_80211_inject_frame(&(0x7f0000000040), 0x0, 0x0) 06:28:16 executing program 4: pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0xd, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000000)) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000040)) syz_clone(0x92178f80, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1075.762501][ T6644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:16 executing program 5: syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x5f) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x21c0, 0x101000) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000280)={0x0, 0x3, &(0x7f00000001c0)=[0x8, 0x1ff, 0x4], &(0x7f0000000200)=[0x2, 0x0, 0x7, 0x7, 0x8, 0x9, 0x400], &(0x7f0000000240)=[0x400, 0x0, 0x2, 0x0, 0x9d48]}) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=ANY=[@ANYBLOB="f8bb0500080211000000ffffffffffffffffffffffff0328080211000000080988b40100080211000000080211000001f083767d61f58e0098047e00d340096888d59d56a1eb33b3d859d6ef58432b106a12872ef37a6bb48ae369e766cd2b724ab488ce2a1beda6cea3748713168850019297595140f565dc90675943a051c7df250c1cf05a6d81730768d9cf69fa50beb57110e663718813f2d3cd867b9b8326266ab2080b341f96f8765ef8392da1dd291f51931d299bb8c29bbfb240eb536582af79dd120aeb1b886fdc87d19fe5d83d0319946a3a1fbab3afc8c16e7207e2d4455f396643bc25ac467c138ebde06488"], 0xf2) 06:28:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2], 0x20}}, 0x0) 06:28:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x20}}, 0x0) 06:28:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) (async) syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1075.910351][ T6656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:16 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ded8bb650a11b475", @ANYRES16=r1, @ANYBLOB="01000000000000000000090000000500080000000000"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="040835bdcf08fddbdf2509000000180007000500000008005900", @ANYRES32=0x0, @ANYBLOB="080001000200000008000300", @ANYRES32=r3, @ANYBLOB="0800010000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x4) r4 = syz_open_dev$vcsa(&(0x7f0000000040), 0x4, 0x10800) r5 = io_uring_setup(0x6f76, &(0x7f0000000340)={0x0, 0xe342, 0x800, 0x1, 0x3b9, 0x0, r4}) (async) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r7, 0x21, 0x0, 0x0, 0x0) bind$phonet(r7, &(0x7f0000000180)={0x23, 0x1f, 0x81, 0x7f}, 0x10) (async) setsockopt$inet6_dccp_buf(r6, 0x21, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000100)=r6, 0x1) (async) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x90000) (async) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r6) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000802}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r9, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x2) (async) syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0) 06:28:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ded8bb650a11b475", @ANYRES16=r1, @ANYBLOB="01000000000000000000090000000500080000000000"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="040835bdcf08fddbdf2509000000180007000500000008005900", @ANYRES32=0x0, @ANYBLOB="080001000200000008000300", @ANYRES32=r3, @ANYBLOB="0800010000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x4) r4 = syz_open_dev$vcsa(&(0x7f0000000040), 0x4, 0x10800) r5 = io_uring_setup(0x6f76, &(0x7f0000000340)={0x0, 0xe342, 0x800, 0x1, 0x3b9, 0x0, r4}) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r7, 0x21, 0x0, 0x0, 0x0) bind$phonet(r7, &(0x7f0000000180)={0x23, 0x1f, 0x81, 0x7f}, 0x10) setsockopt$inet6_dccp_buf(r6, 0x21, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000100)=r6, 0x1) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x90000) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r6) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000802}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r9, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x2) syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0) 06:28:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x20}}, 0x0) 06:28:16 executing program 2: syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0xfffffffa, 0xe54, {0xffffffffffffffff}, {0xee01}, 0xc7a, 0x6}) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000240)) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000229bd7000fcdbdf251400010000000100030000000800010002000000baab0a29ea09c4a7ce21312bacffb0fc37d2f1190429415858410a0a170334dac08fb9492670908f73589147d588f36d9fa653ab72232efc264cee899830eea2a7fa4a5c021013ba4d20098c5c029e8238c7b8aa68f71f0e6e10a73970bd2d2e1bf226dd0513160455c47470df2abdf4f65de331c6dd2c32cb419b969c12128091b0f76aae76d8a243c9d2a77d742f70b27006f6207fb6a687a0c50024c0e81eed257312be5a6ac48c197e072e79cb"], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x15) 06:28:16 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x0) 06:28:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x20}}, 0x0) [ 1076.099101][ T6661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1076.139435][ T6674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:16 executing program 2: syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0xfffffffa, 0xe54, {0xffffffffffffffff}, {0xee01}, 0xc7a, 0x6}) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000240)) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000229bd7000fcdbdf251400010000000100030000000800010002000000baab0a29ea09c4a7ce21312bacffb0fc37d2f1190429415858410a0a170334dac08fb9492670908f73589147d588f36d9fa653ab72232efc264cee899830eea2a7fa4a5c021013ba4d20098c5c029e8238c7b8aa68f71f0e6e10a73970bd2d2e1bf226dd0513160455c47470df2abdf4f65de331c6dd2c32cb419b969c12128091b0f76aae76d8a243c9d2a77d742f70b27006f6207fb6a687a0c50024c0e81eed257312be5a6ac48c197e072e79cb"], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x15) syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0xfffffffa, 0xe54, {0xffffffffffffffff}, {0xee01}, 0xc7a, 0x6}) (async) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000240)) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000229bd7000fcdbdf251400010000000100030000000800010002000000baab0a29ea09c4a7ce21312bacffb0fc37d2f1190429415858410a0a170334dac08fb9492670908f73589147d588f36d9fa653ab72232efc264cee899830eea2a7fa4a5c021013ba4d20098c5c029e8238c7b8aa68f71f0e6e10a73970bd2d2e1bf226dd0513160455c47470df2abdf4f65de331c6dd2c32cb419b969c12128091b0f76aae76d8a243c9d2a77d742f70b27006f6207fb6a687a0c50024c0e81eed257312be5a6ac48c197e072e79cb"], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x15) (async) 06:28:16 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0xfffffffffffffe42) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@ctrl_frame=@cf_end_cf_ack={{}, {}, @broadcast, @device_b}, 0x10) [ 1076.191139][ T6680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:16 executing program 5: syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x5f) syz_open_dev$dri(&(0x7f0000000180), 0x21c0, 0x101000) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=ANY=[@ANYBLOB="f8bb0500080211000000ffffffffffffffffffffffff0328080211000000080988b40100080211000000080211000001f083767d61f58e0098047e00d340096888d59d56a1eb33b3d859d6ef58432b106a12872ef37a6bb48ae369e766cd2b724ab488ce2a1beda6cea3748713168850019297595140f565dc90675943a051c7df250c1cf05a6d81730768d9cf69fa50beb57110e663718813f2d3cd867b9b8326266ab2080b341f96f8765ef8392da1dd291f51931d299bb8c29bbfb240eb536582af79dd120aeb1b886fdc87d19fe5d83d0319946a3a1fbab3afc8c16e7207e2d4455f396643bc25ac467c138ebde06488"], 0xf2) 06:28:16 executing program 2: syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0xfffffffa, 0xe54, {0xffffffffffffffff}, {0xee01}, 0xc7a, 0x6}) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000240)) (async, rerun: 64) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000229bd7000fcdbdf251400010000000100030000000800010002000000baab0a29ea09c4a7ce21312bacffb0fc37d2f1190429415858410a0a170334dac08fb9492670908f73589147d588f36d9fa653ab72232efc264cee899830eea2a7fa4a5c021013ba4d20098c5c029e8238c7b8aa68f71f0e6e10a73970bd2d2e1bf226dd0513160455c47470df2abdf4f65de331c6dd2c32cb419b969c12128091b0f76aae76d8a243c9d2a77d742f70b27006f6207fb6a687a0c50024c0e81eed257312be5a6ac48c197e072e79cb"], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x15) 06:28:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="9b0900000000000000001f0000"], 0x20}}, 0x0) [ 1076.243931][ T6687] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:28:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="9b0900000000000000001f0000"], 0x20}}, 0x0) [ 1076.262209][ T6689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1076.279484][ T6695] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:28:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="9b0900000000000000001f0000"], 0x20}}, 0x0) [ 1076.309398][ T6697] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:28:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="9b0900000000000000001f0000000a0001007770"], 0x20}}, 0x0) 06:28:17 executing program 2: r0 = syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000080)) rt_sigaction(0x33, &(0x7f0000000140)={&(0x7f00000000c0)="d1007a0e51104b3d847b11213f231e77b49bc2a1b263852c843b0e65893191531b118c1a089914dcf5d3e0ab3218cc80d365", 0x58000007, &(0x7f0000000100)="08bea89894b8d4890fd63c2f8cb0f17bb33759c2e07cf2eb5f1cc7f250fe55493a98d45f80cfe1ba743baf57163be4fbe6f4", {[0x21]}}, &(0x7f0000000200)={&(0x7f0000000180)="e121ad416e8cb09a3bfd088b815a7b815fe53d86960adfae4449ea1c007f602f7b4c43ab29167f1b5cfe13de0d4d34cd972c", 0x0, &(0x7f00000001c0)="e3b68c481ce22f76359e545b9283c1b91a5b3791649f0d1dacafea92fc73660224dad3f0840dc36f8ce0c5351995ae58556b"}, 0x8, &(0x7f0000000240)) pselect6(0x40, &(0x7f0000000280)={0x4, 0x100, 0x5, 0x0, 0x0, 0x7fffffffffffffff, 0xc85, 0xfbe2}, &(0x7f00000002c0)={0x100000000, 0xa2f, 0x80, 0x9, 0x9, 0xc953, 0x3, 0x3}, &(0x7f0000000300)={0x8000000000000001, 0xff, 0x2, 0x5, 0x6, 0x2, 0x5, 0x400}, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x2]}, 0x8}) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000000)) 06:28:17 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ded8bb650a11b475", @ANYRES16=r1, @ANYBLOB="01000000000000000000090000000500080000000000"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="040835bdcf08fddbdf2509000000180007000500000008005900", @ANYRES32=0x0, @ANYBLOB="080001000200000008000300", @ANYRES32=r3, @ANYBLOB="0800010000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x4) r4 = syz_open_dev$vcsa(&(0x7f0000000040), 0x4, 0x10800) r5 = io_uring_setup(0x6f76, &(0x7f0000000340)={0x0, 0xe342, 0x800, 0x1, 0x3b9, 0x0, r4}) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r7, 0x21, 0x0, 0x0, 0x0) bind$phonet(r7, &(0x7f0000000180)={0x23, 0x1f, 0x81, 0x7f}, 0x10) setsockopt$inet6_dccp_buf(r6, 0x21, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000100)=r6, 0x1) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x90000) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r6) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000802}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r9, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x2) syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0) 06:28:17 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x0) 06:28:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="9b0900000000000000001f0000000a0001007770"], 0x20}}, 0x0) [ 1076.479533][ T6703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1076.485472][ T6706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:17 executing program 2: r0 = syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000080)) rt_sigaction(0x33, &(0x7f0000000140)={&(0x7f00000000c0)="d1007a0e51104b3d847b11213f231e77b49bc2a1b263852c843b0e65893191531b118c1a089914dcf5d3e0ab3218cc80d365", 0x58000007, &(0x7f0000000100)="08bea89894b8d4890fd63c2f8cb0f17bb33759c2e07cf2eb5f1cc7f250fe55493a98d45f80cfe1ba743baf57163be4fbe6f4", {[0x21]}}, &(0x7f0000000200)={&(0x7f0000000180)="e121ad416e8cb09a3bfd088b815a7b815fe53d86960adfae4449ea1c007f602f7b4c43ab29167f1b5cfe13de0d4d34cd972c", 0x0, &(0x7f00000001c0)="e3b68c481ce22f76359e545b9283c1b91a5b3791649f0d1dacafea92fc73660224dad3f0840dc36f8ce0c5351995ae58556b"}, 0x8, &(0x7f0000000240)) pselect6(0x40, &(0x7f0000000280)={0x4, 0x100, 0x5, 0x0, 0x0, 0x7fffffffffffffff, 0xc85, 0xfbe2}, &(0x7f00000002c0)={0x100000000, 0xa2f, 0x80, 0x9, 0x9, 0xc953, 0x3, 0x3}, &(0x7f0000000300)={0x8000000000000001, 0xff, 0x2, 0x5, 0x6, 0x2, 0x5, 0x400}, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x2]}, 0x8}) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000000)) (async) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000000)) 06:28:17 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0xfffffffffffffe42) (async) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@ctrl_frame=@cf_end_cf_ack={{}, {}, @broadcast, @device_b}, 0x10) [ 1076.536194][ T6712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="9b0900000000000000001f0000000a0001007770"], 0x20}}, 0x0) 06:28:17 executing program 2: r0 = syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000080)) (async) rt_sigaction(0x33, &(0x7f0000000140)={&(0x7f00000000c0)="d1007a0e51104b3d847b11213f231e77b49bc2a1b263852c843b0e65893191531b118c1a089914dcf5d3e0ab3218cc80d365", 0x58000007, &(0x7f0000000100)="08bea89894b8d4890fd63c2f8cb0f17bb33759c2e07cf2eb5f1cc7f250fe55493a98d45f80cfe1ba743baf57163be4fbe6f4", {[0x21]}}, &(0x7f0000000200)={&(0x7f0000000180)="e121ad416e8cb09a3bfd088b815a7b815fe53d86960adfae4449ea1c007f602f7b4c43ab29167f1b5cfe13de0d4d34cd972c", 0x0, &(0x7f00000001c0)="e3b68c481ce22f76359e545b9283c1b91a5b3791649f0d1dacafea92fc73660224dad3f0840dc36f8ce0c5351995ae58556b"}, 0x8, &(0x7f0000000240)) (async, rerun: 32) pselect6(0x40, &(0x7f0000000280)={0x4, 0x100, 0x5, 0x0, 0x0, 0x7fffffffffffffff, 0xc85, 0xfbe2}, &(0x7f00000002c0)={0x100000000, 0xa2f, 0x80, 0x9, 0x9, 0xc953, 0x3, 0x3}, &(0x7f0000000300)={0x8000000000000001, 0xff, 0x2, 0x5, 0x6, 0x2, 0x5, 0x400}, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x2]}, 0x8}) (rerun: 32) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000000)) 06:28:17 executing program 5: syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x5f) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=ANY=[@ANYBLOB="f8bb0500080211000000ffffffffffffffffffffffff0328080211000000080988b40100080211000000080211000001f083767d61f58e0098047e00d340096888d59d56a1eb33b3d859d6ef58432b106a12872ef37a6bb48ae369e766cd2b724ab488ce2a1beda6cea3748713168850019297595140f565dc90675943a051c7df250c1cf05a6d81730768d9cf69fa50beb57110e663718813f2d3cd867b9b8326266ab2080b341f96f8765ef8392da1dd291f51931d299bb8c29bbfb240eb536582af79dd120aeb1b886fdc87d19fe5d83d0319946a3a1fbab3afc8c16e7207e2d4455f396643bc25ac467c138ebde06488"], 0xf2) [ 1076.619018][ T6718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30"], 0x20}}, 0x0) 06:28:17 executing program 2: syz_clone(0x8396a980, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:17 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ded8bb650a11b475", @ANYRES16=r1, @ANYBLOB="01000000000000000000090000000500080000000000"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="040835bdcf08fddbdf2509000000180007000500000008005900", @ANYRES32=0x0, @ANYBLOB="080001000200000008000300", @ANYRES32=r3, @ANYBLOB="0800010000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x4) r4 = syz_open_dev$vcsa(&(0x7f0000000040), 0x4, 0x10800) r5 = io_uring_setup(0x6f76, &(0x7f0000000340)={0x0, 0xe342, 0x800, 0x1, 0x3b9, 0x0, r4}) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r7, 0x21, 0x0, 0x0, 0x0) bind$phonet(r7, &(0x7f0000000180)={0x23, 0x1f, 0x81, 0x7f}, 0x10) setsockopt$inet6_dccp_buf(r6, 0x21, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000100)=r6, 0x1) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x90000) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r6) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000802}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r9, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x2) syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0) 06:28:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="9b0900000000000000001f0000000a0001007770"], 0x20}}, 0x0) 06:28:17 executing program 2: syz_clone(0x8396a980, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:17 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x0) 06:28:17 executing program 2: syz_clone(0x8396a980, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:17 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0xfffffffffffffe42) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@ctrl_frame=@cf_end_cf_ack={{}, {}, @broadcast, @device_b}, 0x10) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0xfffffffffffffe42) (async) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@ctrl_frame=@cf_end_cf_ack={{}, {}, @broadcast, @device_b}, 0x10) (async) 06:28:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="9b0900000000000000001f0000000a0001007770"], 0x20}}, 0x0) [ 1076.862531][ T6737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1076.870631][ T6734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:17 executing program 2: sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x0) syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x3, &(0x7f0000000000)=0x6) [ 1076.883703][ T6739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1076.890606][ T6740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:17 executing program 2: sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async) syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = getpid() sched_setscheduler(r0, 0x3, &(0x7f0000000000)=0x6) 06:28:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="9b0900000000000000001f0000000a0001007770"], 0x20}}, 0x0) 06:28:17 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=ANY=[@ANYBLOB="f8bb0500080211000000ffffffffffffffffffffffff0328080211000000080988b40100080211000000080211000001f083767d61f58e0098047e00d340096888d59d56a1eb33b3d859d6ef58432b106a12872ef37a6bb48ae369e766cd2b724ab488ce2a1beda6cea3748713168850019297595140f565dc90675943a051c7df250c1cf05a6d81730768d9cf69fa50beb57110e663718813f2d3cd867b9b8326266ab2080b341f96f8765ef8392da1dd291f51931d299bb8c29bbfb240eb536582af79dd120aeb1b886fdc87d19fe5d83d0319946a3a1fbab3afc8c16e7207e2d4455f396643bc25ac467c138ebde06488"], 0xf2) [ 1076.957350][ T6748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e"], 0x20}}, 0x0) 06:28:17 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ded8bb650a11b475", @ANYRES16=r1, @ANYBLOB="01000000000000000000090000000500080000000000"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="040835bdcf08fddbdf2509000000180007000500000008005900", @ANYRES32=0x0, @ANYBLOB="080001000200000008000300", @ANYRES32=r3, @ANYBLOB="0800010000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x4) r4 = syz_open_dev$vcsa(&(0x7f0000000040), 0x4, 0x10800) r5 = io_uring_setup(0x6f76, &(0x7f0000000340)={0x0, 0xe342, 0x800, 0x1, 0x3b9, 0x0, r4}) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r7, 0x21, 0x0, 0x0, 0x0) bind$phonet(r7, &(0x7f0000000180)={0x23, 0x1f, 0x81, 0x7f}, 0x10) setsockopt$inet6_dccp_buf(r6, 0x21, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000100)=r6, 0x1) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x90000) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r6) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000802}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r9, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x2) 06:28:17 executing program 2: sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x0) syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x3, &(0x7f0000000000)=0x6) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async) syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) getpid() (async) sched_setscheduler(r0, 0x3, &(0x7f0000000000)=0x6) (async) 06:28:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e"], 0x20}}, 0x0) [ 1077.492736][ T210] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.572200][ T210] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.646254][ T210] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.703869][ T210] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.469808][ T466] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1078.472387][ T466] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1078.474625][ T466] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1078.476799][ T466] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1078.479103][ T466] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1078.480910][ T466] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1078.717374][ T6796] chnl_net:caif_netlink_parms(): no params data found [ 1078.824985][ T6796] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.826691][ T6796] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.828344][ T6796] bridge_slave_0: entered allmulticast mode [ 1078.831488][ T6796] bridge_slave_0: entered promiscuous mode [ 1078.905041][ T6796] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.906776][ T6796] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.908466][ T6796] bridge_slave_1: entered allmulticast mode [ 1078.910279][ T6796] bridge_slave_1: entered promiscuous mode [ 1078.931423][ T6796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1078.986520][ T210] hsr_slave_0: left promiscuous mode [ 1079.014678][ T210] hsr_slave_1: left promiscuous mode [ 1079.073513][ T210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1079.075173][ T210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1079.079642][ T210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1079.081320][ T210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1079.087084][ T210] bridge_slave_1: left allmulticast mode [ 1079.088404][ T210] bridge_slave_1: left promiscuous mode [ 1079.089806][ T210] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.134346][ T210] bridge_slave_0: left allmulticast mode [ 1079.135650][ T210] bridge_slave_0: left promiscuous mode [ 1079.137043][ T210] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.263514][ T210] veth1_macvtap: left promiscuous mode [ 1079.264932][ T210] veth0_macvtap: left promiscuous mode [ 1079.266356][ T210] veth1_vlan: left promiscuous mode [ 1079.267606][ T210] veth0_vlan: left promiscuous mode [ 1079.438091][ T210] team0 (unregistering): Port device team_slave_1 removed [ 1079.450801][ T210] team0 (unregistering): Port device team_slave_0 removed [ 1079.458462][ T210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1079.489811][ T210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1079.640723][ T210] bond0 (unregistering): Released all slaves [ 1079.759738][ T6796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1079.786782][ T6796] team0: Port device team_slave_0 added [ 1079.789618][ T6796] team0: Port device team_slave_1 added [ 1079.805785][ T6796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1079.807313][ T6796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1079.813161][ T6796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1079.823433][ T6796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1079.825003][ T6796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1079.830797][ T6796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1079.885626][ T6796] hsr_slave_0: entered promiscuous mode [ 1079.924813][ T6796] hsr_slave_1: entered promiscuous mode [ 1080.503449][ T466] Bluetooth: hci2: command 0x0409 tx timeout [ 1080.680611][ T6796] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1080.725008][ T6796] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1080.775047][ T6796] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1080.820065][ T6796] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1080.918960][ T6796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1080.937879][ T6162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1080.939972][ T6162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1080.944977][ T6796] 8021q: adding VLAN 0 to HW filter on device team0 [ 1080.954337][ T6162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1080.956535][ T6162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1080.958652][ T6162] bridge0: port 1(bridge_slave_0) entered blocking state [ 1080.960207][ T6162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1080.962262][ T6162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1080.972697][ T6162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1080.975411][ T6162] bridge0: port 2(bridge_slave_1) entered blocking state [ 1080.977005][ T6162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1080.978896][ T6162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1080.991553][ T6796] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1080.995896][ T6796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1080.999734][ T6167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1081.001806][ T6167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1081.004749][ T6167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1081.007663][ T6167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1081.009822][ T6167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1081.012766][ T6167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1081.017757][ T6167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1081.019938][ T6167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1081.022147][ T6167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1081.028328][ T6167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1081.043971][ T6167] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1081.046048][ T6167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1081.198044][ T6167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1081.199958][ T6167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1081.210865][ T6796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1081.231756][ T6167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1081.235470][ T6167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1081.262632][ T6167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1081.265375][ T6167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1081.268840][ T6167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1081.270884][ T6167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1081.281157][ T6796] veth0_vlan: entered promiscuous mode [ 1081.288161][ T6796] veth1_vlan: entered promiscuous mode [ 1081.307619][ T6167] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1081.309716][ T6167] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1081.311764][ T6167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1081.320852][ T6167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1081.326265][ T6796] veth0_macvtap: entered promiscuous mode [ 1081.332209][ T6796] veth1_macvtap: entered promiscuous mode [ 1081.347114][ T6796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.349902][ T6796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.352647][ T6796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.363843][ T6796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.365960][ T6796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.368397][ T6796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.370546][ T6796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.373045][ T6796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.384613][ T6796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.387125][ T6796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.390590][ T6796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1081.392605][ T6162] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1081.395370][ T6162] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1081.397431][ T6162] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1081.399648][ T6162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1081.410528][ T6796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1081.412805][ T6796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.416231][ T6796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1081.418618][ T6796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.420900][ T6796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1081.424323][ T6796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.426643][ T6796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1081.429052][ T6796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.431311][ T6796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1081.435294][ T6796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.438416][ T6796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1081.441315][ T6167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1081.443772][ T6167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1081.448066][ T6796] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.449987][ T6796] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.451997][ T6796] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.454976][ T6796] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.543419][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1081.545281][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1081.548464][ T6055] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1081.572212][T25330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1081.579336][T25330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1081.582588][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1081.684220][ T6888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:22 executing program 0: syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x0) 06:28:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0xffffffffffffffe7, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c080}, 0x48001) 06:28:22 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x9, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x11ca}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40c1) syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:22 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ded8bb650a11b475", @ANYRES16=r1, @ANYBLOB="01000000000000000000090000000500080000000000"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="040835bdcf08fddbdf2509000000180007000500000008005900", @ANYRES32=0x0, @ANYBLOB="080001000200000008000300", @ANYRES32=r3, @ANYBLOB="0800010000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x4) r4 = syz_open_dev$vcsa(&(0x7f0000000040), 0x4, 0x10800) r5 = io_uring_setup(0x6f76, &(0x7f0000000340)={0x0, 0xe342, 0x800, 0x1, 0x3b9, 0x0, r4}) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r7, 0x21, 0x0, 0x0, 0x0) bind$phonet(r7, &(0x7f0000000180)={0x23, 0x1f, 0x81, 0x7f}, 0x10) setsockopt$inet6_dccp_buf(r6, 0x21, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000100)=r6, 0x1) pipe2(&(0x7f00000001c0), 0x90000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r6) 06:28:22 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e"], 0x20}}, 0x0) 06:28:22 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=ANY=[@ANYBLOB="f8bb0500080211000000ffffffffffffffffffffffff0328080211000000080988b40100080211000000080211000001f083767d61f58e0098047e00d340096888d59d56a1eb33b3d859d6ef58432b106a12872ef37a6bb48ae369e766cd2b724ab488ce2a1beda6cea3748713168850019297595140f565dc90675943a051c7df250c1cf05a6d81730768d9cf69fa50beb57110e663718813f2d3cd867b9b8326266ab2080b341f96f8765ef8392da1dd291f51931d299bb8c29bbfb240eb536582af79dd120aeb1b886fdc87d19fe5d83d0319946a3a1fbab3afc8c16e7207e2d4455f396643bc25ac467c138ebde06488"], 0xf2) [ 1082.026319][ T6911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0xffffffffffffffe7, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c080}, 0x48001) 06:28:22 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30"], 0x20}}, 0x0) [ 1082.083491][ T6918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:22 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ded8bb650a11b475", @ANYRES16=r1, @ANYBLOB="01000000000000000000090000000500080000000000"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="040835bdcf08fddbdf2509000000180007000500000008005900", @ANYRES32=0x0, @ANYBLOB="080001000200000008000300", @ANYRES32=r3, @ANYBLOB="0800010000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x4) r4 = syz_open_dev$vcsa(&(0x7f0000000040), 0x4, 0x10800) r5 = io_uring_setup(0x6f76, &(0x7f0000000340)={0x0, 0xe342, 0x800, 0x1, 0x3b9, 0x0, r4}) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r7, 0x21, 0x0, 0x0, 0x0) bind$phonet(r7, &(0x7f0000000180)={0x23, 0x1f, 0x81, 0x7f}, 0x10) setsockopt$inet6_dccp_buf(r6, 0x21, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000100)=r6, 0x1) pipe2(&(0x7f00000001c0), 0x90000) 06:28:22 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x9, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x11ca}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40c1) (async) syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:22 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30"], 0x20}}, 0x0) 06:28:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0xffffffffffffffe7, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c080}, 0x48001) 06:28:22 executing program 0: syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x0) (async) 06:28:22 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ded8bb650a11b475", @ANYRES16=r1, @ANYBLOB="01000000000000000000090000000500080000000000"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="040835bdcf08fddbdf2509000000180007000500000008005900", @ANYRES32=0x0, @ANYBLOB="080001000200000008000300", @ANYRES32=r3, @ANYBLOB="0800010000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x4) r4 = syz_open_dev$vcsa(&(0x7f0000000040), 0x4, 0x10800) r5 = io_uring_setup(0x6f76, &(0x7f0000000340)={0x0, 0xe342, 0x800, 0x1, 0x3b9, 0x0, r4}) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r7, 0x21, 0x0, 0x0, 0x0) bind$phonet(r7, &(0x7f0000000180)={0x23, 0x1f, 0x81, 0x7f}, 0x10) setsockopt$inet6_dccp_buf(r6, 0x21, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000100)=r6, 0x1) 06:28:22 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30"], 0x20}}, 0x0) 06:28:22 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x9, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x11ca}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40c1) (async) syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:22 executing program 3: syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0) 06:28:22 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=ANY=[@ANYBLOB="f8bb0500080211000000ffffffffffffffffffffffff0328080211000000080988b40100080211000000080211000001f083767d61f58e0098047e00d340096888d59d56a1eb33b3d859d6ef58432b106a12872ef37a6bb48ae369e766cd2b724ab488ce2a1beda6cea3748713168850019297595140f565dc90675943a051c7df250c1cf05a6d81730768d9cf69fa50beb57110e663718813f2d3cd867b9b8326266ab2080b341f96f8765ef8392da1dd291f51931d299bb8c29bbfb240eb536582af79dd120aeb1b886fdc87d19fe5d83d0319946a3a1fbab3afc8c16e7207e2d4455f396643bc25ac467c138ebde06488"], 0xf2) [ 1082.437453][ T6944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ded8bb650a11b475", @ANYRES16=r1, @ANYBLOB="01000000000000000000090000000500080000000000"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="040835bdcf08fddbdf2509000000180007000500000008005900", @ANYRES32=0x0, @ANYBLOB="080001000200000008000300", @ANYRES32=r3, @ANYBLOB="0800010000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x4) r4 = syz_open_dev$vcsa(&(0x7f0000000040), 0x4, 0x10800) r5 = io_uring_setup(0x6f76, &(0x7f0000000340)={0x0, 0xe342, 0x800, 0x1, 0x3b9, 0x0, r4}) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r7, 0x21, 0x0, 0x0, 0x0) bind$phonet(r7, &(0x7f0000000180)={0x23, 0x1f, 0x81, 0x7f}, 0x10) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000100)=r6, 0x1) [ 1082.453659][ T6949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:23 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30"], 0x20}}, 0x0) [ 1082.491566][ T6952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:23 executing program 2: syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x9d27, 0x0, 0x0) sched_setparam(r0, &(0x7f0000000080)=0x8) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r2, 0x9d27, 0x0, 0x0) sched_setparam(r2, &(0x7f00000000c0)=0x8000) migrate_pages(r1, 0x9d27, 0x0, 0x0) migrate_pages(r1, 0xefd, &(0x7f0000000000)=0x1000, &(0x7f0000000040)=0x3) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_clone(0x829c0000, &(0x7f00000001c0)="f8e3684780be69a9c958f6e84a917c71c6da64a320d1fe1c18acb7ce4f43177fb7af839f6618455b34b769705f586d71da5ed136cfeba1bf9157c4c6cc75f36af9dd9a3643b109dd54c940cb35d08b546dba0eb4a6b71b92f474acfec74775eafe819c3a613229dc42bd1b5492f72d62d0657ade2408334e50d4ebb6d889dbfd34cd", 0x82, &(0x7f0000000280), &(0x7f0000000380), &(0x7f0000000300)="00000010000010") ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000340)={0x2, 0x40, {r4}, {0xee00}, 0x28, 0x1000}) migrate_pages(r3, 0x9d27, 0x0, 0x0) waitid(0x1, r3, &(0x7f0000000140), 0x20000000, 0x0) ptrace$poke(0x5, r1, &(0x7f0000000100), 0x6) 06:28:23 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30"], 0x20}}, 0x0) 06:28:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ded8bb650a11b475", @ANYRES16=r1, @ANYBLOB="01000000000000000000090000000500080000000000"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="040835bdcf08fddbdf2509000000180007000500000008005900", @ANYRES32=0x0, @ANYBLOB="080001000200000008000300", @ANYRES32=r3, @ANYBLOB="0800010000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x4) r4 = syz_open_dev$vcsa(&(0x7f0000000040), 0x4, 0x10800) r5 = io_uring_setup(0x6f76, &(0x7f0000000340)={0x0, 0xe342, 0x800, 0x1, 0x3b9, 0x0, r4}) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r7, 0x21, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000100)=r6, 0x1) [ 1082.573818][ T466] Bluetooth: hci2: command 0x041b tx timeout 06:28:23 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30"], 0x20}}, 0x0) [ 1085.513824][ T210] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.480179][ T466] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1086.482889][ T466] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1086.491494][ T466] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1086.494128][ T466] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1086.495942][ T466] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1086.610120][ T210] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.618865][ T6992] chnl_net:caif_netlink_parms(): no params data found [ 1086.650414][ T6992] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.652067][ T6992] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.654689][ T6992] bridge_slave_0: entered allmulticast mode [ 1086.657370][ T6992] bridge_slave_0: entered promiscuous mode [ 1086.685453][ T210] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.694169][ T6992] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.695791][ T6992] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.697599][ T6992] bridge_slave_1: entered allmulticast mode [ 1086.699424][ T6992] bridge_slave_1: entered promiscuous mode [ 1086.718185][ T6992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1086.722181][ T6992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1086.751544][ T210] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.760349][ T6992] team0: Port device team_slave_0 added [ 1086.762990][ T6992] team0: Port device team_slave_1 added [ 1086.794787][ T6992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1086.796265][ T6992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1086.802145][ T6992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1086.815231][ T6992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1086.816761][ T6992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1086.822644][ T6992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1086.897151][ T6992] hsr_slave_0: entered promiscuous mode [ 1086.943625][ T6992] hsr_slave_1: entered promiscuous mode [ 1086.983629][ T6992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1086.985286][ T6992] Cannot create hsr debugfs directory [ 1088.222959][ T210] hsr_slave_0: left promiscuous mode [ 1088.263824][ T210] hsr_slave_1: left promiscuous mode [ 1088.353459][ T210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1088.355241][ T210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1088.359080][ T210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1088.360754][ T210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1088.371831][ T210] bridge_slave_1: left allmulticast mode [ 1088.373045][ T210] bridge_slave_1: left promiscuous mode [ 1088.374755][ T210] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.435000][ T210] bridge_slave_0: left allmulticast mode [ 1088.436337][ T210] bridge_slave_0: left promiscuous mode [ 1088.437701][ T210] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.553623][ T210] veth1_macvtap: left promiscuous mode [ 1088.554925][ T210] veth0_macvtap: left promiscuous mode [ 1088.556350][ T210] veth1_vlan: left promiscuous mode [ 1088.557612][ T210] veth0_vlan: left promiscuous mode [ 1088.573367][ T5992] Bluetooth: hci2: command 0x0409 tx timeout [ 1088.787677][ T210] team0 (unregistering): Port device team_slave_1 removed [ 1088.802262][ T210] team0 (unregistering): Port device team_slave_0 removed [ 1088.809154][ T210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1088.837364][ T210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1088.979077][ T210] bond0 (unregistering): Released all slaves [ 1089.110019][ T6992] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1089.155465][ T6992] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1089.206373][ T6992] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1089.245136][ T6992] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1089.319465][ T6992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1089.325436][T19075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1089.327575][T19075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1089.331345][ T6992] 8021q: adding VLAN 0 to HW filter on device team0 [ 1089.335460][T18990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1089.337670][T18990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1089.340021][T18990] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.341590][T18990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1089.344193][T18990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1089.355669][T18990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1089.357951][T18990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1089.360090][T18990] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.361726][T18990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1089.364677][T18990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1089.367409][T18990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1089.369975][T18990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1089.372501][T18990] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1089.376135][T18990] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1089.387404][ T6992] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1089.389812][ T6992] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1089.393857][T18990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1089.396297][T18990] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1089.398517][T18990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1089.400821][T18990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1089.404682][T18990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1089.407042][T18990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1089.409219][T18990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1089.491547][ T6992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1089.493947][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1089.495755][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1089.505855][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1089.508160][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1089.519250][T18990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1089.521617][T18990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1089.524603][ T6162] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1089.526712][ T6162] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1089.530316][ T6992] veth0_vlan: entered promiscuous mode [ 1089.536453][ T6992] veth1_vlan: entered promiscuous mode [ 1089.547977][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1089.550587][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1089.552759][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1089.555895][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1089.560239][ T6992] veth0_macvtap: entered promiscuous mode [ 1089.564480][ T6992] veth1_macvtap: entered promiscuous mode [ 1089.572237][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1089.575575][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.577701][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1089.580254][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.582514][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1089.586069][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.588350][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1089.590743][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.593065][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1089.597108][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.600378][ T6992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1089.602423][T19075] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1089.605785][T19075] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1089.608095][T19075] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1089.610342][T19075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1089.615365][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1089.617868][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.620198][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1089.622612][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.625349][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1089.627785][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.629999][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1089.632232][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.635430][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1089.637822][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.641204][ T6992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1089.646113][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1089.648383][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1089.651438][ T6992] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.654706][ T6992] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.656764][ T6992] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.658659][ T6992] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.702265][T13510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.707530][T13510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.710770][ T6162] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1089.757309][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.759364][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.762656][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1089.871811][ T7035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1089.875385][ T7035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:30 executing program 0: syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x0) 06:28:30 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYRES16=r2, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30"], 0x20}}, 0x0) 06:28:30 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ded8bb650a11b475", @ANYRES16=r1, @ANYBLOB="01000000000000000000090000000500080000000000"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="040835bdcf08fddbdf2509000000180007000500000008005900", @ANYRES32=0x0, @ANYBLOB="080001000200000008000300", @ANYRES32=r3, @ANYBLOB="0800010000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x4) r4 = syz_open_dev$vcsa(&(0x7f0000000040), 0x4, 0x10800) r5 = io_uring_setup(0x6f76, &(0x7f0000000340)={0x0, 0xe342, 0x800, 0x1, 0x3b9, 0x0, r4}) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400), 0x80) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000100)=r6, 0x1) 06:28:30 executing program 2: syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x9d27, 0x0, 0x0) sched_setparam(r0, &(0x7f0000000080)=0x8) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r2, 0x9d27, 0x0, 0x0) sched_setparam(r2, &(0x7f00000000c0)=0x8000) migrate_pages(r1, 0x9d27, 0x0, 0x0) migrate_pages(r1, 0xefd, &(0x7f0000000000)=0x1000, &(0x7f0000000040)=0x3) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_clone(0x829c0000, &(0x7f00000001c0)="f8e3684780be69a9c958f6e84a917c71c6da64a320d1fe1c18acb7ce4f43177fb7af839f6618455b34b769705f586d71da5ed136cfeba1bf9157c4c6cc75f36af9dd9a3643b109dd54c940cb35d08b546dba0eb4a6b71b92f474acfec74775eafe819c3a613229dc42bd1b5492f72d62d0657ade2408334e50d4ebb6d889dbfd34cd", 0x82, &(0x7f0000000280), &(0x7f0000000380), &(0x7f0000000300)="00000010000010") ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000340)={0x2, 0x40, {r4}, {0xee00}, 0x28, 0x1000}) migrate_pages(r3, 0x9d27, 0x0, 0x0) waitid(0x1, r3, &(0x7f0000000140), 0x20000000, 0x0) ptrace$poke(0x5, r1, &(0x7f0000000100), 0x6) syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) migrate_pages(r0, 0x9d27, 0x0, 0x0) (async) sched_setparam(r0, &(0x7f0000000080)=0x8) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) migrate_pages(r2, 0x9d27, 0x0, 0x0) (async) sched_setparam(r2, &(0x7f00000000c0)=0x8000) (async) migrate_pages(r1, 0x9d27, 0x0, 0x0) (async) migrate_pages(r1, 0xefd, &(0x7f0000000000)=0x1000, &(0x7f0000000040)=0x3) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x829c0000, &(0x7f00000001c0)="f8e3684780be69a9c958f6e84a917c71c6da64a320d1fe1c18acb7ce4f43177fb7af839f6618455b34b769705f586d71da5ed136cfeba1bf9157c4c6cc75f36af9dd9a3643b109dd54c940cb35d08b546dba0eb4a6b71b92f474acfec74775eafe819c3a613229dc42bd1b5492f72d62d0657ade2408334e50d4ebb6d889dbfd34cd", 0x82, &(0x7f0000000280), &(0x7f0000000380), &(0x7f0000000300)="00000010000010") (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000340)={0x2, 0x40, {r4}, {0xee00}, 0x28, 0x1000}) (async) migrate_pages(r3, 0x9d27, 0x0, 0x0) (async) waitid(0x1, r3, &(0x7f0000000140), 0x20000000, 0x0) (async) ptrace$poke(0x5, r1, &(0x7f0000000100), 0x6) (async) 06:28:30 executing program 3: syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0) 06:28:30 executing program 5: syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=ANY=[@ANYBLOB="f8bb0500080211000000ffffffffffffffffffffffff0328080211000000080988b40100080211000000080211000001f083767d61f58e0098047e00d340096888d59d56a1eb33b3d859d6ef58432b106a12872ef37a6bb48ae369e766cd2b724ab488ce2a1beda6cea3748713168850019297595140f565dc90675943a051c7df250c1cf05a6d81730768d9cf69fa50beb57110e663718813f2d3cd867b9b8326266ab2080b341f96f8765ef8392da1dd291f51931d299bb8c29bbfb240eb536582af79dd120aeb1b886fdc87d19fe5d83d0319946a3a1fbab3afc8c16e7207e2d4455f396643bc25ac467c138ebde06488"], 0xf2) [ 1090.204149][ T7040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1090.231453][ T7041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:30 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYRES16=r2, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30"], 0x20}}, 0x0) [ 1090.247484][ T7050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:30 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ded8bb650a11b475", @ANYRES16=r1, @ANYBLOB="01000000000000000000090000000500080000000000"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="040835bdcf08fddbdf2509000000180007000500000008005900", @ANYRES32=0x0, @ANYBLOB="080001000200000008000300", @ANYRES32=r3, @ANYBLOB="0800010000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x4) r4 = syz_open_dev$vcsa(&(0x7f0000000040), 0x4, 0x10800) r5 = io_uring_setup(0x6f76, &(0x7f0000000340)={0x0, 0xe342, 0x800, 0x1, 0x3b9, 0x0, r4}) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000100)=r6, 0x1) 06:28:30 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYRES16=r2, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30"], 0x20}}, 0x0) 06:28:30 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30"], 0x20}}, 0x0) 06:28:30 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ded8bb650a11b475", @ANYRES16=r1, @ANYBLOB="01000000000000000000090000000500080000000000"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="040835bdcf08fddbdf2509000000180007000500000008005900", @ANYRES32=0x0, @ANYBLOB="080001000200000008000300", @ANYRES32=r3, @ANYBLOB="0800010000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x4) r4 = syz_open_dev$vcsa(&(0x7f0000000040), 0x4, 0x10800) r5 = io_uring_setup(0x6f76, &(0x7f0000000340)={0x0, 0xe342, 0x800, 0x1, 0x3b9, 0x0, r4}) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000100), 0x1) 06:28:30 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30"], 0x20}}, 0x0) 06:28:31 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30"], 0x20}}, 0x0) 06:28:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ded8bb650a11b475", @ANYRES16=r1, @ANYBLOB="01000000000000000000090000000500080000000000"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="040835bdcf08fddbdf2509000000180007000500000008005900", @ANYRES32=0x0, @ANYBLOB="080001000200000008000300", @ANYRES32=r3, @ANYBLOB="0800010000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x4) syz_open_dev$vcsa(&(0x7f0000000040), 0x4, 0x10800) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000100), 0x1) 06:28:31 executing program 0: syz_80211_inject_frame(&(0x7f0000000040), &(0x7f00000000c0)=@data_frame={@no_qos=@type00={{0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x3c}, @device_b, @device_a, @random="28526c05a68a", {0x9, 0x81}}, @random="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"}, 0x881) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=@ctrl_frame=@cf_end_cf_ack={{}, {0x258e}, @broadcast, @broadcast}, 0x10) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000980), &(0x7f00000009c0)=0x10, 0x0) 06:28:31 executing program 2: syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x9d27, 0x0, 0x0) (async) sched_setparam(r0, &(0x7f0000000080)=0x8) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r2, 0x9d27, 0x0, 0x0) (async) sched_setparam(r2, &(0x7f00000000c0)=0x8000) migrate_pages(r1, 0x9d27, 0x0, 0x0) (async) migrate_pages(r1, 0xefd, &(0x7f0000000000)=0x1000, &(0x7f0000000040)=0x3) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_clone(0x829c0000, &(0x7f00000001c0)="f8e3684780be69a9c958f6e84a917c71c6da64a320d1fe1c18acb7ce4f43177fb7af839f6618455b34b769705f586d71da5ed136cfeba1bf9157c4c6cc75f36af9dd9a3643b109dd54c940cb35d08b546dba0eb4a6b71b92f474acfec74775eafe819c3a613229dc42bd1b5492f72d62d0657ade2408334e50d4ebb6d889dbfd34cd", 0x82, &(0x7f0000000280), &(0x7f0000000380), &(0x7f0000000300)="00000010000010") ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000340)={0x2, 0x40, {r4}, {0xee00}, 0x28, 0x1000}) migrate_pages(r3, 0x9d27, 0x0, 0x0) waitid(0x1, r3, &(0x7f0000000140), 0x20000000, 0x0) (async) ptrace$poke(0x5, r1, &(0x7f0000000100), 0x6) 06:28:31 executing program 5: syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="f8bb0500080211000000ffffffffffffffffffffffff0328080211000000080988b40100080211000000080211000001f083767d61f58e0098047e00d340096888d59d56a1eb33b3d859d6ef58432b106a12872ef37a6bb48ae369e766cd2b724ab488ce2a1beda6cea3748713168850019297595140f565dc90675943a051c7df250c1cf05a6d81730768d9cf69fa50beb57110e663718813f2d3cd867b9b8326266ab2080b341f96f8765ef8392da1dd291f51931d299bb8c29bbfb240eb536582af79dd120aeb1b886fdc87d19fe5d83d0319946a3a1fbab3afc8c16e7207e2d4455f396643bc25ac467c138ebde06488"], 0xf2) 06:28:31 executing program 3: syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0) [ 1090.581076][ T7080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:31 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00', @ANYRES16=r2, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30"], 0x20}}, 0x0) 06:28:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ded8bb650a11b475", @ANYRES16=r1, @ANYBLOB="01000000000000000000090000000500080000000000"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="040835bdcf08fddbdf2509000000180007000500000008005900", @ANYRES32=0x0, @ANYBLOB="080001000200000008000300", @ANYRES32=r3, @ANYBLOB="0800010000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x4) syz_open_dev$vcsa(&(0x7f0000000040), 0x4, 0x10800) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000100), 0x1) [ 1090.654344][ T5992] Bluetooth: hci2: command 0x041b tx timeout 06:28:31 executing program 2: syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x9d27, 0x0, 0x0) sched_setparam(r0, &(0x7f0000000080)=0x8) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r2, 0x9d27, 0x0, 0x0) sched_setparam(r2, &(0x7f00000000c0)=0x8000) migrate_pages(r1, 0x9d27, 0x0, 0x0) migrate_pages(r1, 0xefd, &(0x7f0000000000)=0x1000, &(0x7f0000000040)=0x3) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_clone(0x829c0000, &(0x7f00000001c0)="f8e3684780be69a9c958f6e84a917c71c6da64a320d1fe1c18acb7ce4f43177fb7af839f6618455b34b769705f586d71da5ed136cfeba1bf9157c4c6cc75f36af9dd9a3643b109dd54c940cb35d08b546dba0eb4a6b71b92f474acfec74775eafe819c3a613229dc42bd1b5492f72d62d0657ade2408334e50d4ebb6d889dbfd34cd", 0x82, &(0x7f0000000280), &(0x7f0000000380), &(0x7f0000000300)="00000010000010") ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000340)={0x2, 0x40, {r4}, {0xee00}, 0x28, 0x1000}) migrate_pages(r3, 0x9d27, 0x0, 0x0) waitid(0x1, r3, &(0x7f0000000140), 0x20000000, 0x0) ptrace$poke(0x5, r1, &(0x7f0000000100), 0x6) [ 1090.695642][ T7097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1090.698292][ T7090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:31 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00', @ANYRES16=r2, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30"], 0x20}}, 0x0) 06:28:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ded8bb650a11b475", @ANYRES16=r1, @ANYBLOB="01000000000000000000090000000500080000000000"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="040835bdcf08fddbdf2509000000180007000500000008005900", @ANYRES32=0x0, @ANYBLOB="080001000200000008000300", @ANYRES32=r3, @ANYBLOB="0800010000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x4) syz_open_dev$vcsa(&(0x7f0000000040), 0x4, 0x10800) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000100), 0x1) 06:28:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ded8bb650a11b475", @ANYRES16=r1, @ANYBLOB="01000000000000000000090000000500080000000000"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="040835bdcf08fddbdf2509000000180007000500000008005900", @ANYRES32=0x0, @ANYBLOB="080001000200000008000300", @ANYRES32=r3, @ANYBLOB="0800010000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x4) r4 = io_uring_setup(0x6f76, &(0x7f0000000340)={0x0, 0xe342, 0x800, 0x1, 0x3b9}) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000100), 0x1) 06:28:31 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00', @ANYRES16=r2, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30"], 0x20}}, 0x0) 06:28:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ded8bb650a11b475", @ANYRES16=r1, @ANYBLOB="01000000000000000000090000000500080000000000"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00'}) r3 = io_uring_setup(0x6f76, &(0x7f0000000340)={0x0, 0xe342, 0x800, 0x1, 0x3b9}) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000100), 0x1) 06:28:31 executing program 0: syz_80211_inject_frame(&(0x7f0000000040), &(0x7f00000000c0)=@data_frame={@no_qos=@type00={{0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x3c}, @device_b, @device_a, @random="28526c05a68a", {0x9, 0x81}}, @random="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"}, 0x881) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=@ctrl_frame=@cf_end_cf_ack={{}, {0x258e}, @broadcast, @broadcast}, 0x10) (async) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000980), &(0x7f00000009c0)=0x10, 0x0) 06:28:31 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16=r2, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30"], 0x20}}, 0x0) 06:28:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ded8bb650a11b475", @ANYRES16=r1, @ANYBLOB="01000000000000000000090000000500080000000000"], 0x1c}}, 0x0) r3 = io_uring_setup(0x6f76, &(0x7f0000000340)={0x0, 0xe342, 0x800, 0x1, 0x3b9}) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000100), 0x1) 06:28:31 executing program 5: syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0xf2) 06:28:31 executing program 3: getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000003c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x80, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, 0x80, 0x80, 0x4, 0x7fff}}) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r4, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r4, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) r5 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) r6 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r7, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r7, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) r8 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) r9 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r10, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r10, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) r11 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) r12 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r13, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r13, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) r14 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) r15 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r15, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r16, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r14, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r16, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ec0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d4090000", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fbdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="c4000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000002000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e0000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004008100000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="880102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000104000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="84000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000540004000300fb0404000000070097fd03000000e063000001000000ff7f09070300000009002107010001000600003709000000a7090002010400b0329495b03f00000000ff020003000000ff7f0202010000004c000100240001006270665f686173685f66756e63000000000000000000050003000b0000001c000400070001ff050000000400b804ffffff7f0800201f78a000000800010000000000000000000000b6c025402cc5181a2e747133ae760eafcfd22db70f9669", @ANYRES32=0x0, @ANYBLOB="bc00028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000900000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="9401028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002400040002000106000000802e753f53070000000000027f08000000ff0f0608040000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="8800028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000008000100", @ANYRES32=r1, @ANYBLOB="e801028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000100010040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000004000008000600", @ANYRES32=r4, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400010000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r10, @ANYBLOB="38000100240001006d636173625f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080093cb73848a65cb98148e3fdccb3940da04000004000008000100", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="3402028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ff0300003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r16, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004008100000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000700000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400070000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="5c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c000400a4b6fa090500000005000100060000000200010509000000ff7f0184070000000800950b0000010040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040003000000"], 0x9d4}, 0x1, 0x0, 0x0, 0x24040840}, 0x40) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) 06:28:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00', @ANYRES16=r2, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30"], 0x20}}, 0x0) [ 1091.076150][ T7120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = io_uring_setup(0x6f76, &(0x7f0000000340)={0x0, 0xe342, 0x800, 0x1, 0x3b9}) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000100), 0x1) [ 1091.094686][ T7121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:31 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16=r2, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30"], 0x20}}, 0x0) [ 1091.115074][ T7126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0) r1 = io_uring_setup(0x6f76, &(0x7f0000000340)={0x0, 0xe342, 0x800, 0x1, 0x3b9}) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000100), 0x1) 06:28:31 executing program 2: syz_80211_inject_frame(&(0x7f0000000040), &(0x7f00000000c0)=@data_frame={@no_qos=@type00={{0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x3c}, @device_b, @device_a, @random="28526c05a68a", {0x9, 0x81}}, @random="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"}, 0x881) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=@ctrl_frame=@cf_end_cf_ack={{}, {0x258e}, @broadcast, @broadcast}, 0x10) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000980), &(0x7f00000009c0)=0x10, 0x0) 06:28:31 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16=r2, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30"], 0x20}}, 0x0) 06:28:31 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = io_uring_setup(0x6f76, &(0x7f0000000340)={0x0, 0xe342, 0x800, 0x1, 0x3b9}) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100), 0x1) [ 1091.241824][ T7138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:32 executing program 0: syz_80211_inject_frame(&(0x7f0000000040), &(0x7f00000000c0)=@data_frame={@no_qos=@type00={{0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x3c}, @device_b, @device_a, @random="28526c05a68a", {0x9, 0x81}}, @random="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"}, 0x881) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=@ctrl_frame=@cf_end_cf_ack={{}, {0x258e}, @broadcast, @broadcast}, 0x10) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000980), &(0x7f00000009c0)=0x10, 0x0) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f00000000c0)=@data_frame={@no_qos=@type00={{0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x3c}, @device_b, @device_a, @random="28526c05a68a", {0x9, 0x81}}, @random="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"}, 0x881) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=@ctrl_frame=@cf_end_cf_ack={{}, {0x258e}, @broadcast, @broadcast}, 0x10) (async) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000980), &(0x7f00000009c0)=0x10, 0x0) (async) 06:28:32 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ded8bb650a11b475", @ANYRES16=r1, @ANYBLOB="01000000000000000000090000000500080000000000"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="040835bdcf08fddbdf2509000000180007000500000008005900", @ANYRES32=0x0, @ANYBLOB="080001000200000008000300", @ANYRES32=r3, @ANYBLOB="0800010000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x4) r4 = syz_open_dev$vcsa(&(0x7f0000000040), 0x4, 0x10800) r5 = io_uring_setup(0x6f76, &(0x7f0000000340)={0x0, 0xe342, 0x800, 0x1, 0x3b9, 0x0, r4}) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r7, 0x21, 0x0, 0x0, 0x0) bind$phonet(r7, &(0x7f0000000180)={0x23, 0x1f, 0x81, 0x7f}, 0x10) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000100)=r6, 0x1) 06:28:32 executing program 4: r0 = io_uring_setup(0x6f76, &(0x7f0000000340)={0x0, 0xe342, 0x800, 0x1, 0x3b9}) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100), 0x1) 06:28:32 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x9, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x11ca}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40c1) syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1091.504893][ T7149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1091.531130][ T7150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:32 executing program 3: getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000003c0)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x80, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, 0x80, 0x80, 0x4, 0x7fff}}) (async, rerun: 64) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) (async, rerun: 64) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r4, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r4, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) (async) r5 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) (async, rerun: 64) r6 = socket$phonet(0x23, 0x2, 0x1) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r7, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r7, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) (async) r8 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) (async) r9 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r10, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r10, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) (async) r11 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) (async) r12 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r13, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r13, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) r14 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) (async) r15 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r15, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r16, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r14, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r16, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ec0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d4090000", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fbdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="c4000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000002000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e0000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004008100000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="880102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000104000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="84000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000540004000300fb0404000000070097fd03000000e063000001000000ff7f09070300000009002107010001000600003709000000a7090002010400b0329495b03f00000000ff020003000000ff7f0202010000004c000100240001006270665f686173685f66756e63000000000000000000050003000b0000001c000400070001ff050000000400b804ffffff7f0800201f78a000000800010000000000000000000000b6c025402cc5181a2e747133ae760eafcfd22db70f9669", @ANYRES32=0x0, @ANYBLOB="bc00028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000900000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="9401028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002400040002000106000000802e753f53070000000000027f08000000ff0f0608040000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="8800028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000008000100", @ANYRES32=r1, @ANYBLOB="e801028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000100010040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000004000008000600", @ANYRES32=r4, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400010000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r10, @ANYBLOB="38000100240001006d636173625f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080093cb73848a65cb98148e3fdccb3940da04000004000008000100", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="3402028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ff0300003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r16, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004008100000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000700000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400070000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="5c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c000400a4b6fa090500000005000100060000000200010509000000ff7f0184070000000800950b0000010040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040003000000"], 0x9d4}, 0x1, 0x0, 0x0, 0x24040840}, 0x40) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) 06:28:32 executing program 4: r0 = io_uring_setup(0x0, &(0x7f0000000340)={0x0, 0xe342, 0x800, 0x1, 0x3b9}) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100), 0x1) 06:28:32 executing program 1: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=ANY=[@ANYBLOB="f8bb0500080211000000ffffffffffffffffffffffff0328080211000000080988b40100080211000000080211000001f083767d61f58e0098047e00d340096888d59d56a1eb33b3d859d6ef58432b106a12872ef37a6bb48ae369e766cd2b724ab488ce2a1beda6cea3748713168850019297595140f565dc90675943a051c7df250c1cf05a6d81730768d9cf69fa50beb57110e663718813f2d3cd867b9b8326266ab2080b341f96f8765ef8392da1dd291f51931d299bb8c29bbfb240eb536582af79dd120aeb1b886fdc87d19fe5d83d0319946a3a1fbab3afc8c16e7207e2d4455f396643bc25ac467c138ebde06488"], 0xf2) 06:28:32 executing program 5: sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x0) syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x3, &(0x7f0000000000)=0x6) 06:28:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ded8bb650a11b475", @ANYRES16=r1, @ANYBLOB="01000000000000000000090000000500080000000000"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="040835bdcf08fddbdf2509000000180007000500000008005900", @ANYRES32=0x0, @ANYBLOB="080001000200000008000300", @ANYRES32=r3, @ANYBLOB="0800010000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x4) r4 = syz_open_dev$vcsa(&(0x7f0000000040), 0x4, 0x10800) r5 = io_uring_setup(0x6f76, &(0x7f0000000340)={0x0, 0xe342, 0x800, 0x1, 0x3b9, 0x0, r4}) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r7, 0x21, 0x0, 0x0, 0x0) bind$phonet(r7, &(0x7f0000000180)={0x23, 0x1f, 0x81, 0x7f}, 0x10) setsockopt$inet6_dccp_buf(r6, 0x21, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000100)=r6, 0x1) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x90000) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r6) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000802}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r9, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x2) syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0) [ 1091.604703][ T7157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:32 executing program 4: r0 = io_uring_setup(0x0, &(0x7f0000000340)={0x0, 0xe342, 0x800, 0x1, 0x3b9}) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100), 0x1) 06:28:32 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2], 0x20}}, 0x0) 06:28:32 executing program 4: r0 = io_uring_setup(0x0, &(0x7f0000000340)={0x0, 0xe342, 0x800, 0x1, 0x3b9}) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100), 0x1) [ 1091.749668][ T7167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:32 executing program 0: ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x4, 0x8, {}, {0xffffffffffffffff}, 0x0, 0x6}) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) 06:28:32 executing program 4: r0 = io_uring_setup(0x6f76, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100), 0x1) 06:28:32 executing program 5: syz_80211_inject_frame(&(0x7f0000000040), 0x0, 0x0) 06:28:32 executing program 3: getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000003c0)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x80, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, 0x80, 0x80, 0x4, 0x7fff}}) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) (async) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r4, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r4, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) (async, rerun: 64) r5 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) r6 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r7, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r7, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) (async, rerun: 64) r8 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) (rerun: 64) r9 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r10, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r10, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) (async) r11 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) (async, rerun: 64) r12 = socket$phonet(0x23, 0x2, 0x1) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r13, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r13, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) r14 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) (async, rerun: 64) r15 = socket$phonet(0x23, 0x2, 0x1) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r15, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r16, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r14, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r16, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ec0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d4090000", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fbdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="c4000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000002000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e0000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004008100000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="880102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000104000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="84000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000540004000300fb0404000000070097fd03000000e063000001000000ff7f09070300000009002107010001000600003709000000a7090002010400b0329495b03f00000000ff020003000000ff7f0202010000004c000100240001006270665f686173685f66756e63000000000000000000050003000b0000001c000400070001ff050000000400b804ffffff7f0800201f78a000000800010000000000000000000000b6c025402cc5181a2e747133ae760eafcfd22db70f9669", @ANYRES32=0x0, @ANYBLOB="bc00028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000900000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="9401028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002400040002000106000000802e753f53070000000000027f08000000ff0f0608040000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="8800028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000008000100", @ANYRES32=r1, @ANYBLOB="e801028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000100010040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000004000008000600", @ANYRES32=r4, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400010000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r10, @ANYBLOB="38000100240001006d636173625f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080093cb73848a65cb98148e3fdccb3940da04000004000008000100", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="3402028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ff0300003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r16, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004008100000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000700000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400070000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="5c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c000400a4b6fa090500000005000100060000000200010509000000ff7f0184070000000800950b0000010040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040003000000"], 0x9d4}, 0x1, 0x0, 0x0, 0x24040840}, 0x40) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) 06:28:32 executing program 4: r0 = io_uring_setup(0x6f76, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100), 0x1) [ 1091.889470][ T7179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1091.901095][ T7181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:32 executing program 1: syz_80211_inject_frame(&(0x7f0000000040), 0x0, 0x0) 06:28:32 executing program 4: r0 = io_uring_setup(0x6f76, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100), 0x1) [ 1091.970893][ T7187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:32 executing program 4: r0 = io_uring_setup(0x6f76, &(0x7f0000000340)={0x0, 0x0, 0x800, 0x1, 0x3b9}) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100), 0x1) 06:28:32 executing program 2: sched_getattr(0x0, &(0x7f0000000380)={0x38}, 0x38, 0x0) r0 = syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x284000, &(0x7f0000000000)="e2584b0bf0ec1b1a57fb1a8e65feaefd9cb752914dd6340d577f187d09c4ad74818d4099744bf6461fa4e2d9874b2c9b6f870abbc190ecd8ee574fb5aabedcce9e4bdffae61080bdb4e7bf0ee06965c82dc3a1acb5238f53ce2fbf31cd277335760b15cbf41c85213eb8def1240c556650226680eed18d6534ed38bfd793f05d49830b43178745571a6a2d2ce90c96144a", 0x91, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="04e2a04b0af7f54d6b2e1d11ba24f1a94ca1a63d57b79cf0fd0128288b6d91ddf07368df2def3fb8cc45eaeaa6d9d8b7fa89cf23644a7bf153bb6378fc36cc4d5ef025849af5f52435870529dd8ea810bf8aa22b012893318811ec16fb89a45eb4193f5595b00008ac621404a056385f9dc2fb6bbc66789fdc04be980bbdd5216a7c8391e6a6a94d034d832ba9407198f1b828bdaec79b33eb842bb5441f52670b4f408205d6f5828bf2ac46f7877f5d114393d23aea1a9c76eea29212d76488630cc7607deda62733e9ca") ptrace$setregset(0x4205, r0, 0x202, &(0x7f0000000340)={&(0x7f0000000240)="c8e86efe80a2b3560fd33ca74bcaf473d4e904e3360fe48729862d857a676eb8a6462c37e9e60b7532fe85097d34a9a93744b7defafa0e7715337edf188ca22b23e5bf58cb24c8a0213b0a5d3869829453f1d5ac47451b0be57bd16fff37ba4c948b3e3dd165e4405408bb9e2ee159961c87e47acafd6ab3308d238ea600a6a60d59aced20e59f3ed37fda4e4e091a4e72436960a7586e284f604dd5cfe86ae38b8218c277513e54026541045d2cda2d28f2bb57610cb496758224c02c36febd62a68880fd876806", 0xc8}) 06:28:32 executing program 4: r0 = io_uring_setup(0x6f76, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x3b9}) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100), 0x1) 06:28:32 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '!'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x44}}, 0x41) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40c1, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_clone(0x80000000, &(0x7f0000000140)="2f382dbebe153e1fe65e3be90b7a04d6028993fa136f538f45563a943df5375ba5429cd1f373d28131b4e8dd615291de4424299276ee8f175c862f5926375d84f24f582346efc2695a1184362b00db3b01e47dd5a38f323965e77f4f60f69790114a3aacb9bbd141c25e765eaeb475eeff47b519fc94733114cebb94f7c13c1aa95605b921dbb236a4d8fb01279a4b917bfd0e84e2a0821d2afce96bd681f66a1891c5fac6322f6c128a480846da2a78767c2f25aa14ffa4e1a5258a5b7388697c96535bd6d1d96f223bcc27674ea4bebfa5bc2ea0cbbef09e1ae72506bc9e2dff9111de", 0xe4, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="002aca8f6dbaa84d5829d8160d37495b4090e8dfb5744d7171c96e28faf54b5c1785cb3b1aab819769ba96aabb5c17fe4a116f80790e26efdf6453c4a73ac714cfbc062d51837637717bddacbce51c8d9cfc2cd3d7d560a12e3ac9852019ad6407ffdf6037e16662f1231b316f5f7d88c27a611bd2b79b61421042edbdbda6ab9895f65e10c669bec959d116df8fce27f7f7963e2cb3d0ddc58275605a6d4c661296bae67a6a44a506cda8f5d8e20e2934f6084e8b3e361d8408d1a060cd6f471595114c7ce2bcae8b223688c320ebd156c08a113ff095eef9e573391b687165976b31ef589d7bbb4cbfc2a3cb1ac2d747f22ce79bf94486430b9884") ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x48, 0x81, 0x7ff, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1f, 0x9}}) [ 1092.140390][ T7194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:32 executing program 4: r0 = io_uring_setup(0x6f76, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3b9}) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100), 0x1) 06:28:32 executing program 5: syz_80211_inject_frame(&(0x7f0000000040), 0x0, 0x0) 06:28:32 executing program 0: ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x4, 0x8, {}, {0xffffffffffffffff}, 0x0, 0x6}) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x4, 0x8, {}, {0xffffffffffffffff}, 0x0, 0x6}) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) [ 1092.236869][ T7203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:32 executing program 4: r0 = io_uring_setup(0x6f76, &(0x7f0000000340)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100), 0x1) 06:28:32 executing program 4: io_uring_setup(0x6f76, &(0x7f0000000340)) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000100), 0x1) 06:28:32 executing program 1: syz_80211_inject_frame(&(0x7f0000000040), 0x0, 0x0) [ 1092.290446][ T7208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1092.309345][ T7212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:32 executing program 4: io_uring_setup(0x6f76, &(0x7f0000000340)) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000100), 0x1) [ 1092.337987][ T7213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:32 executing program 4: io_uring_setup(0x6f76, &(0x7f0000000340)) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000100), 0x1) 06:28:33 executing program 4: r0 = io_uring_setup(0x6f76, &(0x7f0000000340)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) 06:28:33 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '!'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x44}}, 0x41) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40c1, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_clone(0x80000000, &(0x7f0000000140)="2f382dbebe153e1fe65e3be90b7a04d6028993fa136f538f45563a943df5375ba5429cd1f373d28131b4e8dd615291de4424299276ee8f175c862f5926375d84f24f582346efc2695a1184362b00db3b01e47dd5a38f323965e77f4f60f69790114a3aacb9bbd141c25e765eaeb475eeff47b519fc94733114cebb94f7c13c1aa95605b921dbb236a4d8fb01279a4b917bfd0e84e2a0821d2afce96bd681f66a1891c5fac6322f6c128a480846da2a78767c2f25aa14ffa4e1a5258a5b7388697c96535bd6d1d96f223bcc27674ea4bebfa5bc2ea0cbbef09e1ae72506bc9e2dff9111de", 0xe4, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="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") (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x48, 0x81, 0x7ff, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1f, 0x9}}) 06:28:33 executing program 4: syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x5f) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x21c0, 0x101000) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000280)={0x0, 0x3, &(0x7f00000001c0)=[0x8, 0x1ff, 0x4], &(0x7f0000000200)=[0x2, 0x0, 0x7, 0x7, 0x8, 0x9, 0x400], &(0x7f0000000240)=[0x400, 0x0, 0x2, 0x0, 0x9d48]}) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=ANY=[@ANYBLOB="f8bb0500080211000000ffffffffffffffffffffffff0328080211000000080988b40100080211000000080211000001f083767d61f58e0098047e00d340096888d59d56a1eb33b3d859d6ef58432b106a12872ef37a6bb48ae369e766cd2b724ab488ce2a1beda6cea3748713168850019297595140f565dc90675943a051c7df250c1cf05a6d81730768d9cf69fa50beb57110e663718813f2d3cd867b9b8326266ab2080b341f96f8765ef8392da1dd291f51931d299bb8c29bbfb240eb536582af79dd120aeb1b886fdc87d19fe5d83d0319946a3a1fbab3afc8c16e7207e2d4455f396643bc25ac467c138ebde06488"], 0xf2) 06:28:33 executing program 5: syz_80211_inject_frame(&(0x7f0000000040), 0x0, 0x0) 06:28:33 executing program 0: ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x4, 0x8, {}, {0xffffffffffffffff}, 0x0, 0x6}) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) 06:28:33 executing program 1: syz_80211_inject_frame(&(0x7f0000000040), 0x0, 0x0) 06:28:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '!'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x44}}, 0x41) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40c1, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_clone(0x80000000, &(0x7f0000000140)="2f382dbebe153e1fe65e3be90b7a04d6028993fa136f538f45563a943df5375ba5429cd1f373d28131b4e8dd615291de4424299276ee8f175c862f5926375d84f24f582346efc2695a1184362b00db3b01e47dd5a38f323965e77f4f60f69790114a3aacb9bbd141c25e765eaeb475eeff47b519fc94733114cebb94f7c13c1aa95605b921dbb236a4d8fb01279a4b917bfd0e84e2a0821d2afce96bd681f66a1891c5fac6322f6c128a480846da2a78767c2f25aa14ffa4e1a5258a5b7388697c96535bd6d1d96f223bcc27674ea4bebfa5bc2ea0cbbef09e1ae72506bc9e2dff9111de", 0xe4, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="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") ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x48, 0x81, 0x7ff, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1f, 0x9}}) [ 1092.713718][ T7229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1092.718953][ T7221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1092.722471][ T7228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1092.726587][ T7230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1092.728089][ T7222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1092.733670][ T5992] Bluetooth: hci2: command 0x040f tx timeout [ 1092.784707][ T7235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '!'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x44}}, 0x41) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40c1, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_clone(0x80000000, &(0x7f0000000140)="2f382dbebe153e1fe65e3be90b7a04d6028993fa136f538f45563a943df5375ba5429cd1f373d28131b4e8dd615291de4424299276ee8f175c862f5926375d84f24f582346efc2695a1184362b00db3b01e47dd5a38f323965e77f4f60f69790114a3aacb9bbd141c25e765eaeb475eeff47b519fc94733114cebb94f7c13c1aa95605b921dbb236a4d8fb01279a4b917bfd0e84e2a0821d2afce96bd681f66a1891c5fac6322f6c128a480846da2a78767c2f25aa14ffa4e1a5258a5b7388697c96535bd6d1d96f223bcc27674ea4bebfa5bc2ea0cbbef09e1ae72506bc9e2dff9111de", 0xe4, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="002aca8f6dbaa84d5829d8160d37495b4090e8dfb5744d7171c96e28faf54b5c1785cb3b1aab819769ba96aabb5c17fe4a116f80790e26efdf6453c4a73ac714cfbc062d51837637717bddacbce51c8d9cfc2cd3d7d560a12e3ac9852019ad6407ffdf6037e16662f1231b316f5f7d88c27a611bd2b79b61421042edbdbda6ab9895f65e10c669bec959d116df8fce27f7f7963e2cb3d0ddc58275605a6d4c661296bae67a6a44a506cda8f5d8e20e2934f6084e8b3e361d8408d1a060cd6f471595114c7ce2bcae8b223688c320ebd156c08a113ff095eef9e573391b687165976b31ef589d7bbb4cbfc2a3cb1ac2d747f22ce79bf94486430b9884") ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x48, 0x81, 0x7ff, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1f, 0x9}}) 06:28:33 executing program 1: syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x5f) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x21c0, 0x101000) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000280)={0x0, 0x3, &(0x7f00000001c0)=[0x8, 0x1ff, 0x4], &(0x7f0000000200)=[0x2, 0x0, 0x7, 0x7, 0x8, 0x9, 0x400], &(0x7f0000000240)=[0x400, 0x0, 0x2, 0x0, 0x9d48]}) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=ANY=[@ANYBLOB="f8bb0500080211000000ffffffffffffffffffffffff0328080211000000080988b40100080211000000080211000001f083767d61f58e0098047e00d340096888d59d56a1eb33b3d859d6ef58432b106a12872ef37a6bb48ae369e766cd2b724ab488ce2a1beda6cea3748713168850019297595140f565dc90675943a051c7df250c1cf05a6d81730768d9cf69fa50beb57110e663718813f2d3cd867b9b8326266ab2080b341f96f8765ef8392da1dd291f51931d299bb8c29bbfb240eb536582af79dd120aeb1b886fdc87d19fe5d83d0319946a3a1fbab3afc8c16e7207e2d4455f396643bc25ac467c138ebde06488"], 0xf2) 06:28:33 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '!'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x44}}, 0x41) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40c1, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_clone(0x80000000, &(0x7f0000000140)="2f382dbebe153e1fe65e3be90b7a04d6028993fa136f538f45563a943df5375ba5429cd1f373d28131b4e8dd615291de4424299276ee8f175c862f5926375d84f24f582346efc2695a1184362b00db3b01e47dd5a38f323965e77f4f60f69790114a3aacb9bbd141c25e765eaeb475eeff47b519fc94733114cebb94f7c13c1aa95605b921dbb236a4d8fb01279a4b917bfd0e84e2a0821d2afce96bd681f66a1891c5fac6322f6c128a480846da2a78767c2f25aa14ffa4e1a5258a5b7388697c96535bd6d1d96f223bcc27674ea4bebfa5bc2ea0cbbef09e1ae72506bc9e2dff9111de", 0xe4, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="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") ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x48, 0x81, 0x7ff, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1f, 0x9}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x48, 0x81, 0x7ff, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1f, 0x9}}) 06:28:33 executing program 4: syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x5f) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x21c0, 0x101000) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000280)={0x0, 0x3, &(0x7f00000001c0)=[0x8, 0x1ff, 0x4], &(0x7f0000000200)=[0x2, 0x0, 0x7, 0x7, 0x8, 0x9, 0x400], &(0x7f0000000240)=[0x400, 0x0, 0x2, 0x0, 0x9d48]}) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=ANY=[@ANYBLOB="f8bb0500080211000000ffffffffffffffffffffffff0328080211000000080988b40100080211000000080211000001f083767d61f58e0098047e00d340096888d59d56a1eb33b3d859d6ef58432b106a12872ef37a6bb48ae369e766cd2b724ab488ce2a1beda6cea3748713168850019297595140f565dc90675943a051c7df250c1cf05a6d81730768d9cf69fa50beb57110e663718813f2d3cd867b9b8326266ab2080b341f96f8765ef8392da1dd291f51931d299bb8c29bbfb240eb536582af79dd120aeb1b886fdc87d19fe5d83d0319946a3a1fbab3afc8c16e7207e2d4455f396643bc25ac467c138ebde06488"], 0xf2) 06:28:33 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r2, 0x21, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r3, 0x21, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r4, 0x21, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r3, r4]}, 0x80) [ 1093.090418][ T7237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.105428][ T7244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.112764][ T7245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.114431][ T7242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.123078][ T7247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.126650][ T7243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '!'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x44}}, 0x41) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40c1, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_clone(0x80000000, &(0x7f0000000140)="2f382dbebe153e1fe65e3be90b7a04d6028993fa136f538f45563a943df5375ba5429cd1f373d28131b4e8dd615291de4424299276ee8f175c862f5926375d84f24f582346efc2695a1184362b00db3b01e47dd5a38f323965e77f4f60f69790114a3aacb9bbd141c25e765eaeb475eeff47b519fc94733114cebb94f7c13c1aa95605b921dbb236a4d8fb01279a4b917bfd0e84e2a0821d2afce96bd681f66a1891c5fac6322f6c128a480846da2a78767c2f25aa14ffa4e1a5258a5b7388697c96535bd6d1d96f223bcc27674ea4bebfa5bc2ea0cbbef09e1ae72506bc9e2dff9111de", 0xe4, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="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") ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x48, 0x81, 0x7ff, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1f, 0x9}}) [ 1093.169227][ T7251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:33 executing program 1: r0 = syz_clone(0xa0038000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r1, 0x9d27, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r2, 0x9d27, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r3, 0x9d27, 0x0, 0x0) r4 = getpgid(r0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r5, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r8, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r9, 0x21, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r7, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4040040) getpgid(r4) 06:28:34 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async, rerun: 32) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) (rerun: 32) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r2, 0x21, 0x0, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r3, 0x21, 0x0, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r4, 0x21, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r3, r4]}, 0x80) 06:28:34 executing program 4: syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x5f) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x21c0, 0x101000) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000280)={0x0, 0x3, &(0x7f00000001c0)=[0x8, 0x1ff, 0x4], &(0x7f0000000200)=[0x2, 0x0, 0x7, 0x7, 0x8, 0x9, 0x400], &(0x7f0000000240)=[0x400, 0x0, 0x2, 0x0, 0x9d48]}) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=ANY=[@ANYBLOB="f8bb0500080211000000ffffffffffffffffffffffff0328080211000000080988b40100080211000000080211000001f083767d61f58e0098047e00d340096888d59d56a1eb33b3d859d6ef58432b106a12872ef37a6bb48ae369e766cd2b724ab488ce2a1beda6cea3748713168850019297595140f565dc90675943a051c7df250c1cf05a6d81730768d9cf69fa50beb57110e663718813f2d3cd867b9b8326266ab2080b341f96f8765ef8392da1dd291f51931d299bb8c29bbfb240eb536582af79dd120aeb1b886fdc87d19fe5d83d0319946a3a1fbab3afc8c16e7207e2d4455f396643bc25ac467c138ebde06488"], 0xf2) 06:28:34 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x7) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1f}, @broadcast, @broadcast, @random="3c5df8a00015", {0x0, 0xe40}}, @ver_80211n={0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x2, 0x2e, @default, @val={0x1, 0x7, [{0xb, 0x1}, {0x2}, {0x3}, {0x9}, {0x18, 0x1}, {0x2}, {0x36, 0x1}]}, @void, [{0xdd, 0xb4, "38231748f3c7e4dc62e9b5b23b2a31210df3035de6991d8acc05943c4e351906309289485fa33af0acf466021560fff9a3f3f013df35138c50bd830212e7b79e90bfd6cf25df7ea58c37a516663f07675fcd85d996fddec0678c1beaf1bdc2c56dafb42aeebfc79cc62b782e24755dee10d04bf96142ef8f9325caf5a25788cb37209775fbaef3e080e60e2ea3a0cf06628cfa65f40f8147eb033a005ae4ec495d8d54f2e704f8163e5ead747b34e4174a16d1b1"}, {0xdd, 0xfd, "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"}, {0xdd, 0x89, "154731d48196d8c0d79961388aaba241512ebfc69d5c81f460d47c765fef6aff6bb0ffce07966e1a9de09be57e6800096259eaf432d1d20fb5e6691ff07814b2fcf25e21d6b438b520c7e49e4e4734aafc53584ceae979f5e7af361173b11d8cafdd50954be227861010303dc0d82bfde22e974b33f412b7b6b3960853bee4684d5c424087fbb2518e"}, {0xdd, 0xa5, "949c7f89bbe21bccc7a7530de36eda82ac28a125d43ecbea45cb09b0f837bcfb65e6e37bac22c5149db8f0fbcac348b8d06062499fee3fad7e50fa05458ec539bf32b9eeeb1e03b0634f0da67b17020dcad9fd5e59ac1f13864995a4e26dbbbb48c86a532a4f875403b9c6adc686be6f96d37197778966531ec2f3efb5bf9ac541bf60f8f6f4c6d1a8e55b99cc9a31d577f9b468f4e42f2b806cf1720de24a7f51be2d71a8"}]}, 0x312) syz_80211_inject_frame(&(0x7f0000000380), &(0x7f0000000080)=@ctrl_frame=@bar={{}, {0x4}, @device_a, @device_b, @basic={{0x1, 0x0, 0x0, 0x0, 0x1}, {0x6, 0x1}}}, 0x14) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, &(0x7f0000000140)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x1}, @broadcast, @device_b, @broadcast, {0xc, 0x1}, @broadcast}, @a_msdu=[{@broadcast, @broadcast}, {@device_b, @device_b}, {@broadcast, @broadcast, 0x16, "50ac7358d826de7eb3714bdf41533f81f2c52705e0c8"}, {@device_b, @device_b, 0x29, "5592a49c20ce98dd1e2b0459cce49738ba39c315c72262d7a473e40ecd08f3e66670069d6e9e80d9bc"}, {@device_b, @device_b, 0xa6, "733a1a68c040bf743c5e4edf96b9a1be5b90c2104c0bced3d3427ae7857ce9ebed874a5bf731f93ce818ea6c6bb3518995913d46d0f4752d04c36447c5428a667c19497e02026524cb6f2a5f0f89a787cfc36ba9e977aba3f1ff6fe0873df36dd33faa75929d9ca86940a3aad895f4007c0b4db1f0fc2c293543305404f48772222e216975cb70e9616f23416f90f8d6ba1dad5381c3805ab1777575e55cdb9178faef70d0ff"}, {@broadcast, @device_b, 0x3d, "771e48a05b33340df1bf4b0864edae5e8cdd5178f29b4ae93aff693fecfab49ff3a702d47937ca9d5bc4d429037593667645928fa6e631b90c7d19b4ad"}, {@broadcast, @device_a, 0x49, "28e688632fca2ccdf07ac95e2ab69688dc316a10497ae119c195a901382b2d3346da2942f2c4d54adc0c861b8f6c314e703c4ee6fdb6964f17f6139eddf2731e42774fd1d102f77ebd"}, {@broadcast, @device_b, 0x13, "b52fb36c21eaf8dadd3510a2f47efec9a9d58b"}]}, 0x216) 06:28:34 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r2, 0x21, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r3, 0x21, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r4, 0x21, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r3, r4]}, 0x80) [ 1093.487255][ T7258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '!'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x44}}, 0x41) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40c1, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_clone(0x80000000, &(0x7f0000000140)="2f382dbebe153e1fe65e3be90b7a04d6028993fa136f538f45563a943df5375ba5429cd1f373d28131b4e8dd615291de4424299276ee8f175c862f5926375d84f24f582346efc2695a1184362b00db3b01e47dd5a38f323965e77f4f60f69790114a3aacb9bbd141c25e765eaeb475eeff47b519fc94733114cebb94f7c13c1aa95605b921dbb236a4d8fb01279a4b917bfd0e84e2a0821d2afce96bd681f66a1891c5fac6322f6c128a480846da2a78767c2f25aa14ffa4e1a5258a5b7388697c96535bd6d1d96f223bcc27674ea4bebfa5bc2ea0cbbef09e1ae72506bc9e2dff9111de", 0xe4, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="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") ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x48, 0x81, 0x7ff, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1f, 0x9}}) [ 1093.496813][ T7259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.499748][ T7257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.517973][ T7258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.540694][ T7267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.541345][ T7269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.553601][ T7258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:34 executing program 1: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000180)) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02000000", @ANYRES16=0x0, @ANYBLOB="12002dbd7000ffdb564014277a7797e3b3df25050000000800020008000000080092020000000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000240), 0xffffffffffffffff) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r4, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r4, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) r5 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) r6 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r7, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r7, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000001800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001840)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001ac0)={0xe0, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}, {{0x8}, {0x4}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x400c000) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x220, r1, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x204, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe10}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x6b39, 0x7, 0x9, 0x3db}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x8, 0x2, 0xfe, 0x5}, {0xb08, 0xe9, 0x3f, 0x3}, {0x8001, 0x2, 0x1, 0xffff}, {0xfff, 0x5, 0x0, 0x4}, {0x3ff, 0x3, 0x20, 0x10000}, {0x6ca2, 0x1, 0xcb, 0x5}]}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1000, 0x1f, 0x8, 0x400}, {0x7f, 0x3, 0x1, 0x10001}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}]}}]}, 0x220}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) [ 1093.571999][ T7258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.580829][ T7258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.585322][ T7258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.592333][ T7258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.596013][ T7258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.599318][ T7258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.602448][ T7258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.606817][ T7258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.610225][ T7258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.610887][ T7272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.613497][ T7258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.618580][ T7258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.621666][ T7258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.626074][ T7258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.629445][ T7258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.632648][ T7258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.638331][ T7258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.641906][ T7258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.646571][ T7258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.650895][ T7258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.654764][ T7258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.658125][ T7258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.661243][ T7258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.665445][ T7258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.669019][ T7258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.676218][ T7258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.679469][ T7258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.682666][ T7258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.686405][ T7258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.689281][ T7258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.692336][ T7258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:34 executing program 4: syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x5f) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x21c0, 0x101000) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000280)={0x0, 0x3, &(0x7f00000001c0)=[0x8, 0x1ff, 0x4], &(0x7f0000000200)=[0x2, 0x0, 0x7, 0x7, 0x8, 0x9, 0x400], &(0x7f0000000240)=[0x400, 0x0, 0x2, 0x0, 0x9d48]}) 06:28:34 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x7) (async) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1f}, @broadcast, @broadcast, @random="3c5df8a00015", {0x0, 0xe40}}, @ver_80211n={0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x2, 0x2e, @default, @val={0x1, 0x7, [{0xb, 0x1}, {0x2}, {0x3}, {0x9}, {0x18, 0x1}, {0x2}, {0x36, 0x1}]}, @void, [{0xdd, 0xb4, "38231748f3c7e4dc62e9b5b23b2a31210df3035de6991d8acc05943c4e351906309289485fa33af0acf466021560fff9a3f3f013df35138c50bd830212e7b79e90bfd6cf25df7ea58c37a516663f07675fcd85d996fddec0678c1beaf1bdc2c56dafb42aeebfc79cc62b782e24755dee10d04bf96142ef8f9325caf5a25788cb37209775fbaef3e080e60e2ea3a0cf06628cfa65f40f8147eb033a005ae4ec495d8d54f2e704f8163e5ead747b34e4174a16d1b1"}, {0xdd, 0xfd, "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"}, {0xdd, 0x89, "154731d48196d8c0d79961388aaba241512ebfc69d5c81f460d47c765fef6aff6bb0ffce07966e1a9de09be57e6800096259eaf432d1d20fb5e6691ff07814b2fcf25e21d6b438b520c7e49e4e4734aafc53584ceae979f5e7af361173b11d8cafdd50954be227861010303dc0d82bfde22e974b33f412b7b6b3960853bee4684d5c424087fbb2518e"}, {0xdd, 0xa5, "949c7f89bbe21bccc7a7530de36eda82ac28a125d43ecbea45cb09b0f837bcfb65e6e37bac22c5149db8f0fbcac348b8d06062499fee3fad7e50fa05458ec539bf32b9eeeb1e03b0634f0da67b17020dcad9fd5e59ac1f13864995a4e26dbbbb48c86a532a4f875403b9c6adc686be6f96d37197778966531ec2f3efb5bf9ac541bf60f8f6f4c6d1a8e55b99cc9a31d577f9b468f4e42f2b806cf1720de24a7f51be2d71a8"}]}, 0x312) syz_80211_inject_frame(&(0x7f0000000380), &(0x7f0000000080)=@ctrl_frame=@bar={{}, {0x4}, @device_a, @device_b, @basic={{0x1, 0x0, 0x0, 0x0, 0x1}, {0x6, 0x1}}}, 0x14) (async, rerun: 32) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, &(0x7f0000000140)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x1}, @broadcast, @device_b, @broadcast, {0xc, 0x1}, @broadcast}, @a_msdu=[{@broadcast, @broadcast}, {@device_b, @device_b}, {@broadcast, @broadcast, 0x16, "50ac7358d826de7eb3714bdf41533f81f2c52705e0c8"}, {@device_b, @device_b, 0x29, "5592a49c20ce98dd1e2b0459cce49738ba39c315c72262d7a473e40ecd08f3e66670069d6e9e80d9bc"}, {@device_b, @device_b, 0xa6, "733a1a68c040bf743c5e4edf96b9a1be5b90c2104c0bced3d3427ae7857ce9ebed874a5bf731f93ce818ea6c6bb3518995913d46d0f4752d04c36447c5428a667c19497e02026524cb6f2a5f0f89a787cfc36ba9e977aba3f1ff6fe0873df36dd33faa75929d9ca86940a3aad895f4007c0b4db1f0fc2c293543305404f48772222e216975cb70e9616f23416f90f8d6ba1dad5381c3805ab1777575e55cdb9178faef70d0ff"}, {@broadcast, @device_b, 0x3d, "771e48a05b33340df1bf4b0864edae5e8cdd5178f29b4ae93aff693fecfab49ff3a702d47937ca9d5bc4d429037593667645928fa6e631b90c7d19b4ad"}, {@broadcast, @device_a, 0x49, "28e688632fca2ccdf07ac95e2ab69688dc316a10497ae119c195a901382b2d3346da2942f2c4d54adc0c861b8f6c314e703c4ee6fdb6964f17f6139eddf2731e42774fd1d102f77ebd"}, {@broadcast, @device_b, 0x13, "b52fb36c21eaf8dadd3510a2f47efec9a9d58b"}]}, 0x216) (rerun: 32) [ 1093.827608][ T7273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:34 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r2, 0x21, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r3, 0x21, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r4, 0x21, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r3, r4]}, 0x80) [ 1093.900662][ T7279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '!'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x44}}, 0x41) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40c1, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x48, 0x81, 0x7ff, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1f, 0x9}}) [ 1093.910144][ T7275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.936505][ T7281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:34 executing program 1: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x7) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1f}, @broadcast, @broadcast, @random="3c5df8a00015", {0x0, 0xe40}}, @ver_80211n={0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x2, 0x2e, @default, @val={0x1, 0x7, [{0xb, 0x1}, {0x2}, {0x3}, {0x9}, {0x18, 0x1}, {0x2}, {0x36, 0x1}]}, @void, [{0xdd, 0xb4, "38231748f3c7e4dc62e9b5b23b2a31210df3035de6991d8acc05943c4e351906309289485fa33af0acf466021560fff9a3f3f013df35138c50bd830212e7b79e90bfd6cf25df7ea58c37a516663f07675fcd85d996fddec0678c1beaf1bdc2c56dafb42aeebfc79cc62b782e24755dee10d04bf96142ef8f9325caf5a25788cb37209775fbaef3e080e60e2ea3a0cf06628cfa65f40f8147eb033a005ae4ec495d8d54f2e704f8163e5ead747b34e4174a16d1b1"}, {0xdd, 0xfd, "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"}, {0xdd, 0x89, "154731d48196d8c0d79961388aaba241512ebfc69d5c81f460d47c765fef6aff6bb0ffce07966e1a9de09be57e6800096259eaf432d1d20fb5e6691ff07814b2fcf25e21d6b438b520c7e49e4e4734aafc53584ceae979f5e7af361173b11d8cafdd50954be227861010303dc0d82bfde22e974b33f412b7b6b3960853bee4684d5c424087fbb2518e"}, {0xdd, 0xa5, "949c7f89bbe21bccc7a7530de36eda82ac28a125d43ecbea45cb09b0f837bcfb65e6e37bac22c5149db8f0fbcac348b8d06062499fee3fad7e50fa05458ec539bf32b9eeeb1e03b0634f0da67b17020dcad9fd5e59ac1f13864995a4e26dbbbb48c86a532a4f875403b9c6adc686be6f96d37197778966531ec2f3efb5bf9ac541bf60f8f6f4c6d1a8e55b99cc9a31d577f9b468f4e42f2b806cf1720de24a7f51be2d71a8"}]}, 0x312) syz_80211_inject_frame(&(0x7f0000000380), &(0x7f0000000080)=@ctrl_frame=@bar={{}, {0x4}, @device_a, @device_b, @basic={{0x1, 0x0, 0x0, 0x0, 0x1}, {0x6, 0x1}}}, 0x14) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, &(0x7f0000000140)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x1}, @broadcast, @device_b, @broadcast, {0xc, 0x1}, @broadcast}, @a_msdu=[{@broadcast, @broadcast}, {@device_b, @device_b}, {@broadcast, @broadcast, 0x16, "50ac7358d826de7eb3714bdf41533f81f2c52705e0c8"}, {@device_b, @device_b, 0x29, "5592a49c20ce98dd1e2b0459cce49738ba39c315c72262d7a473e40ecd08f3e66670069d6e9e80d9bc"}, {@device_b, @device_b, 0xa6, "733a1a68c040bf743c5e4edf96b9a1be5b90c2104c0bced3d3427ae7857ce9ebed874a5bf731f93ce818ea6c6bb3518995913d46d0f4752d04c36447c5428a667c19497e02026524cb6f2a5f0f89a787cfc36ba9e977aba3f1ff6fe0873df36dd33faa75929d9ca86940a3aad895f4007c0b4db1f0fc2c293543305404f48772222e216975cb70e9616f23416f90f8d6ba1dad5381c3805ab1777575e55cdb9178faef70d0ff"}, {@broadcast, @device_b, 0x3d, "771e48a05b33340df1bf4b0864edae5e8cdd5178f29b4ae93aff693fecfab49ff3a702d47937ca9d5bc4d429037593667645928fa6e631b90c7d19b4ad"}, {@broadcast, @device_a, 0x49, "28e688632fca2ccdf07ac95e2ab69688dc316a10497ae119c195a901382b2d3346da2942f2c4d54adc0c861b8f6c314e703c4ee6fdb6964f17f6139eddf2731e42774fd1d102f77ebd"}, {@broadcast, @device_b, 0x13, "b52fb36c21eaf8dadd3510a2f47efec9a9d58b"}]}, 0x216) 06:28:34 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) (async) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r2, 0x21, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r3, 0x21, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400), 0x80) (async) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r4, 0x21, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r3, r4]}, 0x80) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r3, r4]}, 0x80) [ 1094.030060][ T7285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1094.037372][ T7283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:34 executing program 4: syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x5f) ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, &(0x7f0000000280)={0x0, 0x3, &(0x7f00000001c0)=[0x8, 0x1ff, 0x4], &(0x7f0000000200)=[0x2, 0x0, 0x7, 0x7, 0x8, 0x9, 0x400], &(0x7f0000000240)=[0x400, 0x0, 0x2, 0x0, 0x9d48]}) [ 1094.154113][ T7287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:34 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x7) (async) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1f}, @broadcast, @broadcast, @random="3c5df8a00015", {0x0, 0xe40}}, @ver_80211n={0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x2, 0x2e, @default, @val={0x1, 0x7, [{0xb, 0x1}, {0x2}, {0x3}, {0x9}, {0x18, 0x1}, {0x2}, {0x36, 0x1}]}, @void, [{0xdd, 0xb4, "38231748f3c7e4dc62e9b5b23b2a31210df3035de6991d8acc05943c4e351906309289485fa33af0acf466021560fff9a3f3f013df35138c50bd830212e7b79e90bfd6cf25df7ea58c37a516663f07675fcd85d996fddec0678c1beaf1bdc2c56dafb42aeebfc79cc62b782e24755dee10d04bf96142ef8f9325caf5a25788cb37209775fbaef3e080e60e2ea3a0cf06628cfa65f40f8147eb033a005ae4ec495d8d54f2e704f8163e5ead747b34e4174a16d1b1"}, {0xdd, 0xfd, "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"}, {0xdd, 0x89, "154731d48196d8c0d79961388aaba241512ebfc69d5c81f460d47c765fef6aff6bb0ffce07966e1a9de09be57e6800096259eaf432d1d20fb5e6691ff07814b2fcf25e21d6b438b520c7e49e4e4734aafc53584ceae979f5e7af361173b11d8cafdd50954be227861010303dc0d82bfde22e974b33f412b7b6b3960853bee4684d5c424087fbb2518e"}, {0xdd, 0xa5, "949c7f89bbe21bccc7a7530de36eda82ac28a125d43ecbea45cb09b0f837bcfb65e6e37bac22c5149db8f0fbcac348b8d06062499fee3fad7e50fa05458ec539bf32b9eeeb1e03b0634f0da67b17020dcad9fd5e59ac1f13864995a4e26dbbbb48c86a532a4f875403b9c6adc686be6f96d37197778966531ec2f3efb5bf9ac541bf60f8f6f4c6d1a8e55b99cc9a31d577f9b468f4e42f2b806cf1720de24a7f51be2d71a8"}]}, 0x312) (async) syz_80211_inject_frame(&(0x7f0000000380), &(0x7f0000000080)=@ctrl_frame=@bar={{}, {0x4}, @device_a, @device_b, @basic={{0x1, 0x0, 0x0, 0x0, 0x1}, {0x6, 0x1}}}, 0x14) (async) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, &(0x7f0000000140)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x1}, @broadcast, @device_b, @broadcast, {0xc, 0x1}, @broadcast}, @a_msdu=[{@broadcast, @broadcast}, {@device_b, @device_b}, {@broadcast, @broadcast, 0x16, "50ac7358d826de7eb3714bdf41533f81f2c52705e0c8"}, {@device_b, @device_b, 0x29, "5592a49c20ce98dd1e2b0459cce49738ba39c315c72262d7a473e40ecd08f3e66670069d6e9e80d9bc"}, {@device_b, @device_b, 0xa6, "733a1a68c040bf743c5e4edf96b9a1be5b90c2104c0bced3d3427ae7857ce9ebed874a5bf731f93ce818ea6c6bb3518995913d46d0f4752d04c36447c5428a667c19497e02026524cb6f2a5f0f89a787cfc36ba9e977aba3f1ff6fe0873df36dd33faa75929d9ca86940a3aad895f4007c0b4db1f0fc2c293543305404f48772222e216975cb70e9616f23416f90f8d6ba1dad5381c3805ab1777575e55cdb9178faef70d0ff"}, {@broadcast, @device_b, 0x3d, "771e48a05b33340df1bf4b0864edae5e8cdd5178f29b4ae93aff693fecfab49ff3a702d47937ca9d5bc4d429037593667645928fa6e631b90c7d19b4ad"}, {@broadcast, @device_a, 0x49, "28e688632fca2ccdf07ac95e2ab69688dc316a10497ae119c195a901382b2d3346da2942f2c4d54adc0c861b8f6c314e703c4ee6fdb6964f17f6139eddf2731e42774fd1d102f77ebd"}, {@broadcast, @device_b, 0x13, "b52fb36c21eaf8dadd3510a2f47efec9a9d58b"}]}, 0x216) 06:28:34 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r2, 0x21, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r3, 0x21, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r4, 0x21, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r3, r4]}, 0x80) 06:28:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '!'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x44}}, 0x41) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40c1, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x48, 0x81, 0x7ff, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1f, 0x9}}) [ 1094.278856][ T7291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1094.285061][ T7296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1094.290195][ T7297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:34 executing program 3: syz_80211_inject_frame(&(0x7f0000000040), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000001800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001840)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001ac0)={0xe0, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}, {{0x8}, {0x4}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x400c000) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x312200ef}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x841}, 0x800) [ 1094.312416][ T7299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:34 executing program 1: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x7) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1f}, @broadcast, @broadcast, @random="3c5df8a00015", {0x0, 0xe40}}, @ver_80211n={0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x2, 0x2e, @default, @val={0x1, 0x7, [{0xb, 0x1}, {0x2}, {0x3}, {0x9}, {0x18, 0x1}, {0x2}, {0x36, 0x1}]}, @void, [{0xdd, 0xb4, "38231748f3c7e4dc62e9b5b23b2a31210df3035de6991d8acc05943c4e351906309289485fa33af0acf466021560fff9a3f3f013df35138c50bd830212e7b79e90bfd6cf25df7ea58c37a516663f07675fcd85d996fddec0678c1beaf1bdc2c56dafb42aeebfc79cc62b782e24755dee10d04bf96142ef8f9325caf5a25788cb37209775fbaef3e080e60e2ea3a0cf06628cfa65f40f8147eb033a005ae4ec495d8d54f2e704f8163e5ead747b34e4174a16d1b1"}, {0xdd, 0xfd, "74505bbd9fd0e4360c3f19664f69e9bec2ec7c0a8acc9a5e5703b2aedee07e65d74b5dac88a1095e6bcbd7ba7dc04abd1bd4dbb643862c2372c3874419d8ad84af1e901ed5cc55867124b52b1dd4f7fc59bb19c101b36cd05e55e35211147a0b220fe83152d6be16f2020dc51fb378194a854f2386042667ae2ef00288c281a606e0397ae7afd255a1718bfafed1ef3e8abb4ec5e813edb121b4c0bc3152e0997c30313f82f0a306a9b4931431a5bdeccacb26fa69d5387decc7b1a5a153d58dcaccb6d88a1e090c705efac7450475bc0c55fa4c72f48082c673c57f02ee152f102353edeb4720f43633ed16c9a8fe080ab886a5bac7a0e56e0ec901f5"}, {0xdd, 0x89, "154731d48196d8c0d79961388aaba241512ebfc69d5c81f460d47c765fef6aff6bb0ffce07966e1a9de09be57e6800096259eaf432d1d20fb5e6691ff07814b2fcf25e21d6b438b520c7e49e4e4734aafc53584ceae979f5e7af361173b11d8cafdd50954be227861010303dc0d82bfde22e974b33f412b7b6b3960853bee4684d5c424087fbb2518e"}, {0xdd, 0xa5, "949c7f89bbe21bccc7a7530de36eda82ac28a125d43ecbea45cb09b0f837bcfb65e6e37bac22c5149db8f0fbcac348b8d06062499fee3fad7e50fa05458ec539bf32b9eeeb1e03b0634f0da67b17020dcad9fd5e59ac1f13864995a4e26dbbbb48c86a532a4f875403b9c6adc686be6f96d37197778966531ec2f3efb5bf9ac541bf60f8f6f4c6d1a8e55b99cc9a31d577f9b468f4e42f2b806cf1720de24a7f51be2d71a8"}]}, 0x312) syz_80211_inject_frame(&(0x7f0000000380), &(0x7f0000000080)=@ctrl_frame=@bar={{}, {0x4}, @device_a, @device_b, @basic={{0x1, 0x0, 0x0, 0x0, 0x1}, {0x6, 0x1}}}, 0x14) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, &(0x7f0000000140)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x1}, @broadcast, @device_b, @broadcast, {0xc, 0x1}, @broadcast}, @a_msdu=[{@broadcast, @broadcast}, {@device_b, @device_b}, {@broadcast, @broadcast, 0x16, "50ac7358d826de7eb3714bdf41533f81f2c52705e0c8"}, {@device_b, @device_b, 0x29, "5592a49c20ce98dd1e2b0459cce49738ba39c315c72262d7a473e40ecd08f3e66670069d6e9e80d9bc"}, {@device_b, @device_b, 0xa6, "733a1a68c040bf743c5e4edf96b9a1be5b90c2104c0bced3d3427ae7857ce9ebed874a5bf731f93ce818ea6c6bb3518995913d46d0f4752d04c36447c5428a667c19497e02026524cb6f2a5f0f89a787cfc36ba9e977aba3f1ff6fe0873df36dd33faa75929d9ca86940a3aad895f4007c0b4db1f0fc2c293543305404f48772222e216975cb70e9616f23416f90f8d6ba1dad5381c3805ab1777575e55cdb9178faef70d0ff"}, {@broadcast, @device_b, 0x3d, "771e48a05b33340df1bf4b0864edae5e8cdd5178f29b4ae93aff693fecfab49ff3a702d47937ca9d5bc4d429037593667645928fa6e631b90c7d19b4ad"}, {@broadcast, @device_a, 0x49, "28e688632fca2ccdf07ac95e2ab69688dc316a10497ae119c195a901382b2d3346da2942f2c4d54adc0c861b8f6c314e703c4ee6fdb6964f17f6139eddf2731e42774fd1d102f77ebd"}, {@broadcast, @device_b, 0x13, "b52fb36c21eaf8dadd3510a2f47efec9a9d58b"}]}, 0x216) 06:28:34 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r4, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r4, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) r5 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) r6 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r7, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r7, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) r8 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) r9 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r10, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r10, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) r11 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) r12 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r13, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r13, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000001800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001840)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001ac0)={0xe0, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}, {{0x8}, {0x4}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x400c000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000280)={0x61c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4695f847}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}]}}, {{0x8, 0x1, r0}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r7}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0x5, 0x2, 0x7}, {0x9, 0x5, 0x1, 0xffffff81}, {0x5, 0x2, 0x7f, 0xcb8}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff000}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}]}}, {{0x8}, {0x88, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x7fb, 0x7f, 0x1, 0x7f}, {0x7539, 0x2, 0x4, 0x7}, {0xe2, 0x9, 0x2, 0x2}]}}}]}}, {{0x8}, {0xa0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r15}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x2, 0x1f, 0xba, 0x6}, {0x6, 0x5a, 0x9, 0x9}, {0x1000, 0x6, 0x1, 0xfff}, {0xf39f, 0xff, 0x1, 0xffffff7b}, {0x8, 0x3, 0x48, 0x3d47}, {0x16e, 0x13, 0x7, 0x2}]}}}]}}, {{0x8, 0x1, r16}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc07d}}, {0x8, 0x6, r18}}}]}}]}, 0x61c}, 0x1, 0x0, 0x0, 0x20000098}, 0x481da909606f745c) [ 1094.375269][ T7303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1094.389730][ T7300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:35 executing program 4: syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x5f) ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, &(0x7f0000000280)={0x0, 0x3, &(0x7f00000001c0)=[0x8, 0x1ff, 0x4], &(0x7f0000000200)=[0x2, 0x0, 0x7, 0x7, 0x8, 0x9, 0x400], &(0x7f0000000240)=[0x400, 0x0, 0x2, 0x0, 0x9d48]}) [ 1094.479613][ T7304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:35 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '!'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x44}}, 0x41) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40c1, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x48, 0x81, 0x7ff, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1f, 0x9}}) [ 1094.618196][ T7307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:35 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r2, 0x21, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r3, 0x21, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r3, r4]}, 0x80) [ 1094.657744][ T7309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:35 executing program 3: syz_80211_inject_frame(&(0x7f0000000040), 0x0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) r0 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001840)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001ac0)={0xe0, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}, {{0x8}, {0x4}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x400c000) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x312200ef}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x841}, 0x800) 06:28:35 executing program 1: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x7) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1f}, @broadcast, @broadcast, @random="3c5df8a00015", {0x0, 0xe40}}, @ver_80211n={0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x2, 0x2e, @default, @val={0x1, 0x7, [{0xb, 0x1}, {0x2}, {0x3}, {0x9}, {0x18, 0x1}, {0x2}, {0x36, 0x1}]}, @void, [{0xdd, 0xb4, "38231748f3c7e4dc62e9b5b23b2a31210df3035de6991d8acc05943c4e351906309289485fa33af0acf466021560fff9a3f3f013df35138c50bd830212e7b79e90bfd6cf25df7ea58c37a516663f07675fcd85d996fddec0678c1beaf1bdc2c56dafb42aeebfc79cc62b782e24755dee10d04bf96142ef8f9325caf5a25788cb37209775fbaef3e080e60e2ea3a0cf06628cfa65f40f8147eb033a005ae4ec495d8d54f2e704f8163e5ead747b34e4174a16d1b1"}, {0xdd, 0xfd, "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"}, {0xdd, 0x89, "154731d48196d8c0d79961388aaba241512ebfc69d5c81f460d47c765fef6aff6bb0ffce07966e1a9de09be57e6800096259eaf432d1d20fb5e6691ff07814b2fcf25e21d6b438b520c7e49e4e4734aafc53584ceae979f5e7af361173b11d8cafdd50954be227861010303dc0d82bfde22e974b33f412b7b6b3960853bee4684d5c424087fbb2518e"}, {0xdd, 0xa5, "949c7f89bbe21bccc7a7530de36eda82ac28a125d43ecbea45cb09b0f837bcfb65e6e37bac22c5149db8f0fbcac348b8d06062499fee3fad7e50fa05458ec539bf32b9eeeb1e03b0634f0da67b17020dcad9fd5e59ac1f13864995a4e26dbbbb48c86a532a4f875403b9c6adc686be6f96d37197778966531ec2f3efb5bf9ac541bf60f8f6f4c6d1a8e55b99cc9a31d577f9b468f4e42f2b806cf1720de24a7f51be2d71a8"}]}, 0x312) syz_80211_inject_frame(&(0x7f0000000380), &(0x7f0000000080)=@ctrl_frame=@bar={{}, {0x4}, @device_a, @device_b, @basic={{0x1, 0x0, 0x0, 0x0, 0x1}, {0x6, 0x1}}}, 0x14) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, &(0x7f0000000140)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x1}, @broadcast, @device_b, @broadcast, {0xc, 0x1}, @broadcast}, @a_msdu=[{@broadcast, @broadcast}, {@device_b, @device_b}, {@broadcast, @broadcast, 0x16, "50ac7358d826de7eb3714bdf41533f81f2c52705e0c8"}, {@device_b, @device_b, 0x29, "5592a49c20ce98dd1e2b0459cce49738ba39c315c72262d7a473e40ecd08f3e66670069d6e9e80d9bc"}, {@device_b, @device_b, 0xa6, "733a1a68c040bf743c5e4edf96b9a1be5b90c2104c0bced3d3427ae7857ce9ebed874a5bf731f93ce818ea6c6bb3518995913d46d0f4752d04c36447c5428a667c19497e02026524cb6f2a5f0f89a787cfc36ba9e977aba3f1ff6fe0873df36dd33faa75929d9ca86940a3aad895f4007c0b4db1f0fc2c293543305404f48772222e216975cb70e9616f23416f90f8d6ba1dad5381c3805ab1777575e55cdb9178faef70d0ff"}, {@broadcast, @device_b, 0x3d, "771e48a05b33340df1bf4b0864edae5e8cdd5178f29b4ae93aff693fecfab49ff3a702d47937ca9d5bc4d429037593667645928fa6e631b90c7d19b4ad"}, {@broadcast, @device_a, 0x49, "28e688632fca2ccdf07ac95e2ab69688dc316a10497ae119c195a901382b2d3346da2942f2c4d54adc0c861b8f6c314e703c4ee6fdb6964f17f6139eddf2731e42774fd1d102f77ebd"}, {@broadcast, @device_b, 0x13, "b52fb36c21eaf8dadd3510a2f47efec9a9d58b"}]}, 0x216) [ 1094.712784][ T7311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:35 executing program 3: syz_80211_inject_frame(&(0x7f0000000040), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000001800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001840)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001ac0)={0xe0, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}, {{0x8}, {0x4}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x400c000) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x312200ef}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x841}, 0x800) syz_80211_inject_frame(&(0x7f0000000040), 0x0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001840)=0x14) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001ac0)={0xe0, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}, {{0x8}, {0x4}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x400c000) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x312200ef}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x841}, 0x800) (async) [ 1094.739813][ T7315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1094.760123][ T7318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:35 executing program 4: syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x5f) ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, &(0x7f0000000280)={0x0, 0x3, &(0x7f00000001c0)=[0x8, 0x1ff, 0x4], &(0x7f0000000200)=[0x2, 0x0, 0x7, 0x7, 0x8, 0x9, 0x400], &(0x7f0000000240)=[0x400, 0x0, 0x2, 0x0, 0x9d48]}) [ 1094.810100][ T7322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1094.813528][ T5992] Bluetooth: hci2: command 0x0419 tx timeout 06:28:35 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) (async, rerun: 64) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) (async) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r4, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r4, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) r5 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) (async) r6 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r7, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r7, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) (async) r8 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) r9 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r10, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r10, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) (async) r11 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) (async) r12 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r13, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r13, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000001800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001840)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001ac0)={0xe0, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}, {{0x8}, {0x4}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x400c000) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000280)={0x61c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4695f847}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}]}}, {{0x8, 0x1, r0}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r7}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0x5, 0x2, 0x7}, {0x9, 0x5, 0x1, 0xffffff81}, {0x5, 0x2, 0x7f, 0xcb8}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff000}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}]}}, {{0x8}, {0x88, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x7fb, 0x7f, 0x1, 0x7f}, {0x7539, 0x2, 0x4, 0x7}, {0xe2, 0x9, 0x2, 0x2}]}}}]}}, {{0x8}, {0xa0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r15}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x2, 0x1f, 0xba, 0x6}, {0x6, 0x5a, 0x9, 0x9}, {0x1000, 0x6, 0x1, 0xfff}, {0xf39f, 0xff, 0x1, 0xffffff7b}, {0x8, 0x3, 0x48, 0x3d47}, {0x16e, 0x13, 0x7, 0x2}]}}}]}}, {{0x8, 0x1, r16}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc07d}}, {0x8, 0x6, r18}}}]}}]}, 0x61c}, 0x1, 0x0, 0x0, 0x20000098}, 0x481da909606f745c) [ 1094.851226][ T7325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:35 executing program 3: syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0xfffffffffffffebf) 06:28:35 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '!'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x44}}, 0x41) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40c1, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x48, 0x81, 0x7ff, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1f, 0x9}}) [ 1094.943073][ T7332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:35 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r2, 0x21, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r3, 0x21, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r3, 0xffffffffffffffff]}, 0x80) 06:28:35 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) (async) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r4, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r4, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) (async, rerun: 32) r5 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) (rerun: 32) r6 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r7, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r7, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) r8 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) (async) r9 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r10, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r10, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) (async) r11 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) (async) r12 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r13, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r13, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) (async, rerun: 32) getsockname$packet(0xffffffffffffffff, &(0x7f0000001800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001840)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001ac0)={0xe0, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}, {{0x8}, {0x4}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x400c000) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000280)={0x61c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4695f847}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}]}}, {{0x8, 0x1, r0}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r7}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0x5, 0x2, 0x7}, {0x9, 0x5, 0x1, 0xffffff81}, {0x5, 0x2, 0x7f, 0xcb8}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff000}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}]}}, {{0x8}, {0x88, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x7fb, 0x7f, 0x1, 0x7f}, {0x7539, 0x2, 0x4, 0x7}, {0xe2, 0x9, 0x2, 0x2}]}}}]}}, {{0x8}, {0xa0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r15}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x2, 0x1f, 0xba, 0x6}, {0x6, 0x5a, 0x9, 0x9}, {0x1000, 0x6, 0x1, 0xfff}, {0xf39f, 0xff, 0x1, 0xffffff7b}, {0x8, 0x3, 0x48, 0x3d47}, {0x16e, 0x13, 0x7, 0x2}]}}}]}}, {{0x8, 0x1, r16}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc07d}}, {0x8, 0x6, r18}}}]}}]}, 0x61c}, 0x1, 0x0, 0x0, 0x20000098}, 0x481da909606f745c) [ 1095.002877][ T7334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1095.009831][ T7336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:35 executing program 1: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x7) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1f}, @broadcast, @broadcast, @random="3c5df8a00015", {0x0, 0xe40}}, @ver_80211n={0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x2, 0x2e, @default, @val={0x1, 0x7, [{0xb, 0x1}, {0x2}, {0x3}, {0x9}, {0x18, 0x1}, {0x2}, {0x36, 0x1}]}, @void, [{0xdd, 0xb4, "38231748f3c7e4dc62e9b5b23b2a31210df3035de6991d8acc05943c4e351906309289485fa33af0acf466021560fff9a3f3f013df35138c50bd830212e7b79e90bfd6cf25df7ea58c37a516663f07675fcd85d996fddec0678c1beaf1bdc2c56dafb42aeebfc79cc62b782e24755dee10d04bf96142ef8f9325caf5a25788cb37209775fbaef3e080e60e2ea3a0cf06628cfa65f40f8147eb033a005ae4ec495d8d54f2e704f8163e5ead747b34e4174a16d1b1"}, {0xdd, 0xfd, "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"}, {0xdd, 0x89, "154731d48196d8c0d79961388aaba241512ebfc69d5c81f460d47c765fef6aff6bb0ffce07966e1a9de09be57e6800096259eaf432d1d20fb5e6691ff07814b2fcf25e21d6b438b520c7e49e4e4734aafc53584ceae979f5e7af361173b11d8cafdd50954be227861010303dc0d82bfde22e974b33f412b7b6b3960853bee4684d5c424087fbb2518e"}, {0xdd, 0xa5, "949c7f89bbe21bccc7a7530de36eda82ac28a125d43ecbea45cb09b0f837bcfb65e6e37bac22c5149db8f0fbcac348b8d06062499fee3fad7e50fa05458ec539bf32b9eeeb1e03b0634f0da67b17020dcad9fd5e59ac1f13864995a4e26dbbbb48c86a532a4f875403b9c6adc686be6f96d37197778966531ec2f3efb5bf9ac541bf60f8f6f4c6d1a8e55b99cc9a31d577f9b468f4e42f2b806cf1720de24a7f51be2d71a8"}]}, 0x312) syz_80211_inject_frame(&(0x7f0000000380), &(0x7f0000000080)=@ctrl_frame=@bar={{}, {0x4}, @device_a, @device_b, @basic={{0x1, 0x0, 0x0, 0x0, 0x1}, {0x6, 0x1}}}, 0x14) [ 1095.077510][ T7340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:35 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x21c0, 0x101000) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000280)={0x0, 0x3, &(0x7f00000001c0)=[0x8, 0x1ff, 0x4], &(0x7f0000000200)=[0x2, 0x0, 0x7, 0x7, 0x8, 0x9, 0x400], &(0x7f0000000240)=[0x400, 0x0, 0x2, 0x0, 0x9d48]}) 06:28:35 executing program 4: r0 = syz_open_dev$dri(0x0, 0x21c0, 0x101000) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000280)={0x0, 0x3, &(0x7f00000001c0)=[0x8, 0x1ff, 0x4], &(0x7f0000000200)=[0x2, 0x0, 0x7, 0x7, 0x8, 0x9, 0x400], &(0x7f0000000240)=[0x400, 0x0, 0x2, 0x0, 0x9d48]}) 06:28:35 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@ctrl_frame=@cf_end_cf_ack={{}, {0x40}, @broadcast, @device_b}, 0x10) 06:28:35 executing program 4: r0 = syz_open_dev$dri(0x0, 0x21c0, 0x101000) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000280)={0x0, 0x3, &(0x7f00000001c0)=[0x8, 0x1ff, 0x4], &(0x7f0000000200)=[0x2, 0x0, 0x7, 0x7, 0x8, 0x9, 0x400], &(0x7f0000000240)=[0x400, 0x0, 0x2, 0x0, 0x9d48]}) [ 1095.160400][ T7347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1095.167615][ T7347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:35 executing program 4: r0 = syz_open_dev$dri(0x0, 0x21c0, 0x101000) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000280)={0x0, 0x3, &(0x7f00000001c0)=[0x8, 0x1ff, 0x4], &(0x7f0000000200)=[0x2, 0x0, 0x7, 0x7, 0x8, 0x9, 0x400], &(0x7f0000000240)=[0x400, 0x0, 0x2, 0x0, 0x9d48]}) 06:28:35 executing program 3: syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0xfffffffffffffebf) 06:28:35 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x101000) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000280)={0x0, 0x3, &(0x7f00000001c0)=[0x8, 0x1ff, 0x4], &(0x7f0000000200)=[0x2, 0x0, 0x7, 0x7, 0x8, 0x9, 0x400], &(0x7f0000000240)=[0x400, 0x0, 0x2, 0x0, 0x9d48]}) 06:28:35 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000280)={0x0, 0x3, &(0x7f00000001c0)=[0x8, 0x1ff, 0x4], &(0x7f0000000200)=[0x2, 0x0, 0x7, 0x7, 0x8, 0x9, 0x400], &(0x7f0000000240)=[0x400, 0x0, 0x2, 0x0, 0x9d48]}) 06:28:35 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '!'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x44}}, 0x41) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40c1, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x48, 0x81, 0x7ff, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1f, 0x9}}) 06:28:35 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, &(0x7f0000000280)={0x0, 0x3, &(0x7f00000001c0)=[0x8, 0x1ff, 0x4], &(0x7f0000000200)=[0x2, 0x0, 0x7, 0x7, 0x8, 0x9, 0x400], &(0x7f0000000240)=[0x400, 0x0, 0x2, 0x0, 0x9d48]}) 06:28:35 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '!'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x44}}, 0x41) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x48, 0x81, 0x7ff, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1f, 0x9}}) 06:28:35 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r2, 0x21, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r3, 0xffffffffffffffff]}, 0x80) 06:28:35 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x48, 0x81, 0x7ff, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1f, 0x9}}) 06:28:35 executing program 1: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x7) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1f}, @broadcast, @broadcast, @random="3c5df8a00015", {0x0, 0xe40}}, @ver_80211n={0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x2, 0x2e, @default, @val={0x1, 0x7, [{0xb, 0x1}, {0x2}, {0x3}, {0x9}, {0x18, 0x1}, {0x2}, {0x36, 0x1}]}, @void, [{0xdd, 0xb4, "38231748f3c7e4dc62e9b5b23b2a31210df3035de6991d8acc05943c4e351906309289485fa33af0acf466021560fff9a3f3f013df35138c50bd830212e7b79e90bfd6cf25df7ea58c37a516663f07675fcd85d996fddec0678c1beaf1bdc2c56dafb42aeebfc79cc62b782e24755dee10d04bf96142ef8f9325caf5a25788cb37209775fbaef3e080e60e2ea3a0cf06628cfa65f40f8147eb033a005ae4ec495d8d54f2e704f8163e5ead747b34e4174a16d1b1"}, {0xdd, 0xfd, "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"}, {0xdd, 0x89, "154731d48196d8c0d79961388aaba241512ebfc69d5c81f460d47c765fef6aff6bb0ffce07966e1a9de09be57e6800096259eaf432d1d20fb5e6691ff07814b2fcf25e21d6b438b520c7e49e4e4734aafc53584ceae979f5e7af361173b11d8cafdd50954be227861010303dc0d82bfde22e974b33f412b7b6b3960853bee4684d5c424087fbb2518e"}, {0xdd, 0xa5, "949c7f89bbe21bccc7a7530de36eda82ac28a125d43ecbea45cb09b0f837bcfb65e6e37bac22c5149db8f0fbcac348b8d06062499fee3fad7e50fa05458ec539bf32b9eeeb1e03b0634f0da67b17020dcad9fd5e59ac1f13864995a4e26dbbbb48c86a532a4f875403b9c6adc686be6f96d37197778966531ec2f3efb5bf9ac541bf60f8f6f4c6d1a8e55b99cc9a31d577f9b468f4e42f2b806cf1720de24a7f51be2d71a8"}]}, 0x312) [ 1095.395367][ T7365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1095.415637][ T7368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:36 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@ctrl_frame=@cf_end_cf_ack={{}, {0x40}, @broadcast, @device_b}, 0x10) 06:28:36 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, &(0x7f0000000280)={0x0, 0x3, &(0x7f00000001c0)=[0x8, 0x1ff, 0x4], &(0x7f0000000200)=[0x2, 0x0, 0x7, 0x7, 0x8, 0x9, 0x400], &(0x7f0000000240)=[0x400, 0x0, 0x2, 0x0, 0x9d48]}) 06:28:36 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x48, 0x81, 0x7ff, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1f, 0x9}}) [ 1095.508604][ T7376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1095.520010][ T7375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1095.520965][ T7376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:36 executing program 3: syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0xfffffffffffffebf) 06:28:36 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x48, 0x81, 0x7ff, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1f, 0x9}}) 06:28:36 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, &(0x7f0000000280)={0x0, 0x3, &(0x7f00000001c0)=[0x8, 0x1ff, 0x4], &(0x7f0000000200)=[0x2, 0x0, 0x7, 0x7, 0x8, 0x9, 0x400], &(0x7f0000000240)=[0x400, 0x0, 0x2, 0x0, 0x9d48]}) 06:28:36 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x48, 0x81, 0x7ff, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1f, 0x9}}) 06:28:36 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, 0x0) 06:28:36 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x48, 0x81, 0x7ff, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1f, 0x9}}) 06:28:36 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1f}, @broadcast, @broadcast, @random="3c5df8a00015", {0x0, 0xe40}}, @ver_80211n={0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x2, 0x2e, @default, @val={0x1, 0x7, [{0xb, 0x1}, {0x2}, {0x3}, {0x9}, {0x18, 0x1}, {0x2}, {0x36, 0x1}]}, @void, [{0xdd, 0xb4, "38231748f3c7e4dc62e9b5b23b2a31210df3035de6991d8acc05943c4e351906309289485fa33af0acf466021560fff9a3f3f013df35138c50bd830212e7b79e90bfd6cf25df7ea58c37a516663f07675fcd85d996fddec0678c1beaf1bdc2c56dafb42aeebfc79cc62b782e24755dee10d04bf96142ef8f9325caf5a25788cb37209775fbaef3e080e60e2ea3a0cf06628cfa65f40f8147eb033a005ae4ec495d8d54f2e704f8163e5ead747b34e4174a16d1b1"}, {0xdd, 0xfd, "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"}, {0xdd, 0x89, "154731d48196d8c0d79961388aaba241512ebfc69d5c81f460d47c765fef6aff6bb0ffce07966e1a9de09be57e6800096259eaf432d1d20fb5e6691ff07814b2fcf25e21d6b438b520c7e49e4e4734aafc53584ceae979f5e7af361173b11d8cafdd50954be227861010303dc0d82bfde22e974b33f412b7b6b3960853bee4684d5c424087fbb2518e"}, {0xdd, 0xa5, "949c7f89bbe21bccc7a7530de36eda82ac28a125d43ecbea45cb09b0f837bcfb65e6e37bac22c5149db8f0fbcac348b8d06062499fee3fad7e50fa05458ec539bf32b9eeeb1e03b0634f0da67b17020dcad9fd5e59ac1f13864995a4e26dbbbb48c86a532a4f875403b9c6adc686be6f96d37197778966531ec2f3efb5bf9ac541bf60f8f6f4c6d1a8e55b99cc9a31d577f9b468f4e42f2b806cf1720de24a7f51be2d71a8"}]}, 0x312) 06:28:36 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, 0x0) 06:28:36 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x48, 0x81, 0x7ff, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1f, 0x9}}) [ 1095.750174][ T7394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:36 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@ctrl_frame=@cf_end_cf_ack={{}, {0x40}, @broadcast, @device_b}, 0x10) 06:28:36 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r2, 0x21, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:36 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, 0x0) [ 1095.845559][ T7396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1095.866720][ T7400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1095.872094][ T7401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:36 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x13) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@mgmt_frame=@beacon={@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x4}, @device_b, @device_b, @initial, {0x9, 0x9}}, @ver_80211n={0x0, 0xd1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1, @random=0x401, 0xa01, @void, @void, @val={0x3, 0x1, 0x70}, @void, @val={0x6, 0x2, 0x1000}, @val={0x5, 0xd5, {0x0, 0xc8, 0x3f, "83cc0584a1372f2024441c8e33b0b799b3af65a52bb1b38a9f979c5ad22239748ee718b8bac4ed3c6e4f7e62d69e202628af1122d7f97e33ce02338a8c31817842a35788f2e168edd3be631d70c78d33855d999a59c84ac0ece3ba34dee8a9d0ccbbbe2925faef9d55d222bf6c923e1611a4ab5e1150329360165757ec9b3d59a7941a699a0b192f687ca4f7d3c471e54ee4df60dd0a581a0426c11bb049dd694bb93356884f0e85376be4d7d7f643cfa39905d103eec3358bd8488b073e21347231b13bdf6a457bc8b95497a57e7b17b638"}}, @void, @val={0x2a, 0x1, {0x1}}, @val={0x3c, 0x4, {0x0, 0x8e, 0x7a}}, @void, @void, @void, @void, [{0xdd, 0xd2, "05440c9d3c593a7582b89629ebeb24e3a9bfa8775b84cb492049fd3e6c9b5a8b925970ea5df099deb748dc6bfc2b1bdd7129793c28a6fb8e041123080bf0a45c6565fb31850079982bdf0e6e47e5fe562a6441d24c2d8026fb87047402a6b5142293fc0f71c4f38443d187dfc1d753400882d72741ee4e3da3dbe16bb612b16be84c63215c2ddd86a00934ac16eea21b65df0437d269f597070949e31742505de23497d196c25929aeefcc69566840695d3004ebf84380b28bcd6395b5a68dbb0961a469e67385a75839fda28bd35343163a"}, {0xdd, 0xe5, "9aeff4418b6da66e1c2a3b4563504d263e471ea69f394dae2d82f3885c3d33cc348f21f3cbc924915f2da222a65e6dab7eee043b38f7d613cb5307a0a010dbdd2cdf9bb220477881ffb7c3b4ceb1612ef5224ae8117419d461d7a038aab9c401692c691f3c82da101505a26024ad4642ad4733bd243668259a235413ff18ab972a2b2b4cb57ea50aa1b720909ef329eb05e8441337f653f3647d533448bcab21949bec02769f8a124c6384c180c47b7ecae030a691afa0cfd38379f81cd1c1baf687a6d161f517664bcc8bc535abc0f6fc8eef87a45f1b06d6aee39bf9453b7df5d4aa5b41"}]}, 0x2ca) 06:28:36 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 06:28:36 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000200)=[0x2, 0x0, 0x7, 0x7, 0x8, 0x9, 0x400], &(0x7f0000000240)=[0x400, 0x0, 0x2, 0x0, 0x9d48]}) 06:28:36 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) [ 1095.917264][ T7406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:36 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x400, 0x0, 0x2, 0x0, 0x9d48]}) 06:28:36 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) 06:28:36 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1f}, @broadcast, @broadcast, @random="3c5df8a00015", {0x0, 0xe40}}, @ver_80211n={0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x2, 0x2e, @default, @val={0x1, 0x7, [{0xb, 0x1}, {0x2}, {0x3}, {0x9}, {0x18, 0x1}, {0x2}, {0x36, 0x1}]}, @void, [{0xdd, 0xb4, "38231748f3c7e4dc62e9b5b23b2a31210df3035de6991d8acc05943c4e351906309289485fa33af0acf466021560fff9a3f3f013df35138c50bd830212e7b79e90bfd6cf25df7ea58c37a516663f07675fcd85d996fddec0678c1beaf1bdc2c56dafb42aeebfc79cc62b782e24755dee10d04bf96142ef8f9325caf5a25788cb37209775fbaef3e080e60e2ea3a0cf06628cfa65f40f8147eb033a005ae4ec495d8d54f2e704f8163e5ead747b34e4174a16d1b1"}, {0xdd, 0xfd, "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"}, {0xdd, 0x89, "154731d48196d8c0d79961388aaba241512ebfc69d5c81f460d47c765fef6aff6bb0ffce07966e1a9de09be57e6800096259eaf432d1d20fb5e6691ff07814b2fcf25e21d6b438b520c7e49e4e4734aafc53584ceae979f5e7af361173b11d8cafdd50954be227861010303dc0d82bfde22e974b33f412b7b6b3960853bee4684d5c424087fbb2518e"}, {0xdd, 0xa5, "949c7f89bbe21bccc7a7530de36eda82ac28a125d43ecbea45cb09b0f837bcfb65e6e37bac22c5149db8f0fbcac348b8d06062499fee3fad7e50fa05458ec539bf32b9eeeb1e03b0634f0da67b17020dcad9fd5e59ac1f13864995a4e26dbbbb48c86a532a4f875403b9c6adc686be6f96d37197778966531ec2f3efb5bf9ac541bf60f8f6f4c6d1a8e55b99cc9a31d577f9b468f4e42f2b806cf1720de24a7f51be2d71a8"}]}, 0x312) 06:28:36 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 06:28:36 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, 0x0) [ 1096.106236][ T7419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:36 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) 06:28:36 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x48, 0x81, 0x7ff, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1f, 0x9}}) 06:28:36 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) [ 1096.219447][ T7425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:36 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r3, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) 06:28:36 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x13) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@mgmt_frame=@beacon={@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x4}, @device_b, @device_b, @initial, {0x9, 0x9}}, @ver_80211n={0x0, 0xd1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1, @random=0x401, 0xa01, @void, @void, @val={0x3, 0x1, 0x70}, @void, @val={0x6, 0x2, 0x1000}, @val={0x5, 0xd5, {0x0, 0xc8, 0x3f, "83cc0584a1372f2024441c8e33b0b799b3af65a52bb1b38a9f979c5ad22239748ee718b8bac4ed3c6e4f7e62d69e202628af1122d7f97e33ce02338a8c31817842a35788f2e168edd3be631d70c78d33855d999a59c84ac0ece3ba34dee8a9d0ccbbbe2925faef9d55d222bf6c923e1611a4ab5e1150329360165757ec9b3d59a7941a699a0b192f687ca4f7d3c471e54ee4df60dd0a581a0426c11bb049dd694bb93356884f0e85376be4d7d7f643cfa39905d103eec3358bd8488b073e21347231b13bdf6a457bc8b95497a57e7b17b638"}}, @void, @val={0x2a, 0x1, {0x1}}, @val={0x3c, 0x4, {0x0, 0x8e, 0x7a}}, @void, @void, @void, @void, [{0xdd, 0xd2, "05440c9d3c593a7582b89629ebeb24e3a9bfa8775b84cb492049fd3e6c9b5a8b925970ea5df099deb748dc6bfc2b1bdd7129793c28a6fb8e041123080bf0a45c6565fb31850079982bdf0e6e47e5fe562a6441d24c2d8026fb87047402a6b5142293fc0f71c4f38443d187dfc1d753400882d72741ee4e3da3dbe16bb612b16be84c63215c2ddd86a00934ac16eea21b65df0437d269f597070949e31742505de23497d196c25929aeefcc69566840695d3004ebf84380b28bcd6395b5a68dbb0961a469e67385a75839fda28bd35343163a"}, {0xdd, 0xe5, "9aeff4418b6da66e1c2a3b4563504d263e471ea69f394dae2d82f3885c3d33cc348f21f3cbc924915f2da222a65e6dab7eee043b38f7d613cb5307a0a010dbdd2cdf9bb220477881ffb7c3b4ceb1612ef5224ae8117419d461d7a038aab9c401692c691f3c82da101505a26024ad4642ad4733bd243668259a235413ff18ab972a2b2b4cb57ea50aa1b720909ef329eb05e8441337f653f3647d533448bcab21949bec02769f8a124c6384c180c47b7ecae030a691afa0cfd38379f81cd1c1baf687a6d161f517664bcc8bc535abc0f6fc8eef87a45f1b06d6aee39bf9453b7df5d4aa5b41"}]}, 0x2ca) (async) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@mgmt_frame=@beacon={@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x4}, @device_b, @device_b, @initial, {0x9, 0x9}}, @ver_80211n={0x0, 0xd1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1, @random=0x401, 0xa01, @void, @void, @val={0x3, 0x1, 0x70}, @void, @val={0x6, 0x2, 0x1000}, @val={0x5, 0xd5, {0x0, 0xc8, 0x3f, "83cc0584a1372f2024441c8e33b0b799b3af65a52bb1b38a9f979c5ad22239748ee718b8bac4ed3c6e4f7e62d69e202628af1122d7f97e33ce02338a8c31817842a35788f2e168edd3be631d70c78d33855d999a59c84ac0ece3ba34dee8a9d0ccbbbe2925faef9d55d222bf6c923e1611a4ab5e1150329360165757ec9b3d59a7941a699a0b192f687ca4f7d3c471e54ee4df60dd0a581a0426c11bb049dd694bb93356884f0e85376be4d7d7f643cfa39905d103eec3358bd8488b073e21347231b13bdf6a457bc8b95497a57e7b17b638"}}, @void, @val={0x2a, 0x1, {0x1}}, @val={0x3c, 0x4, {0x0, 0x8e, 0x7a}}, @void, @void, @void, @void, [{0xdd, 0xd2, "05440c9d3c593a7582b89629ebeb24e3a9bfa8775b84cb492049fd3e6c9b5a8b925970ea5df099deb748dc6bfc2b1bdd7129793c28a6fb8e041123080bf0a45c6565fb31850079982bdf0e6e47e5fe562a6441d24c2d8026fb87047402a6b5142293fc0f71c4f38443d187dfc1d753400882d72741ee4e3da3dbe16bb612b16be84c63215c2ddd86a00934ac16eea21b65df0437d269f597070949e31742505de23497d196c25929aeefcc69566840695d3004ebf84380b28bcd6395b5a68dbb0961a469e67385a75839fda28bd35343163a"}, {0xdd, 0xe5, "9aeff4418b6da66e1c2a3b4563504d263e471ea69f394dae2d82f3885c3d33cc348f21f3cbc924915f2da222a65e6dab7eee043b38f7d613cb5307a0a010dbdd2cdf9bb220477881ffb7c3b4ceb1612ef5224ae8117419d461d7a038aab9c401692c691f3c82da101505a26024ad4642ad4733bd243668259a235413ff18ab972a2b2b4cb57ea50aa1b720909ef329eb05e8441337f653f3647d533448bcab21949bec02769f8a124c6384c180c47b7ecae030a691afa0cfd38379f81cd1c1baf687a6d161f517664bcc8bc535abc0f6fc8eef87a45f1b06d6aee39bf9453b7df5d4aa5b41"}]}, 0x2ca) 06:28:36 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) 06:28:36 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x48, 0x81, 0x7ff, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1f, 0x9}}) [ 1096.269509][ T7427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:36 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x48, 0x81, 0x7ff, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1f, 0x9}}) 06:28:36 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) [ 1096.281149][ T7432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:37 executing program 1: syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1f}, @broadcast, @broadcast, @random="3c5df8a00015", {0x0, 0xe40}}, @ver_80211n={0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x2, 0x2e, @default, @val={0x1, 0x7, [{0xb, 0x1}, {0x2}, {0x3}, {0x9}, {0x18, 0x1}, {0x2}, {0x36, 0x1}]}, @void, [{0xdd, 0xb4, "38231748f3c7e4dc62e9b5b23b2a31210df3035de6991d8acc05943c4e351906309289485fa33af0acf466021560fff9a3f3f013df35138c50bd830212e7b79e90bfd6cf25df7ea58c37a516663f07675fcd85d996fddec0678c1beaf1bdc2c56dafb42aeebfc79cc62b782e24755dee10d04bf96142ef8f9325caf5a25788cb37209775fbaef3e080e60e2ea3a0cf06628cfa65f40f8147eb033a005ae4ec495d8d54f2e704f8163e5ead747b34e4174a16d1b1"}, {0xdd, 0xfd, "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"}, {0xdd, 0x89, "154731d48196d8c0d79961388aaba241512ebfc69d5c81f460d47c765fef6aff6bb0ffce07966e1a9de09be57e6800096259eaf432d1d20fb5e6691ff07814b2fcf25e21d6b438b520c7e49e4e4734aafc53584ceae979f5e7af361173b11d8cafdd50954be227861010303dc0d82bfde22e974b33f412b7b6b3960853bee4684d5c424087fbb2518e"}, {0xdd, 0xa5, "949c7f89bbe21bccc7a7530de36eda82ac28a125d43ecbea45cb09b0f837bcfb65e6e37bac22c5149db8f0fbcac348b8d06062499fee3fad7e50fa05458ec539bf32b9eeeb1e03b0634f0da67b17020dcad9fd5e59ac1f13864995a4e26dbbbb48c86a532a4f875403b9c6adc686be6f96d37197778966531ec2f3efb5bf9ac541bf60f8f6f4c6d1a8e55b99cc9a31d577f9b468f4e42f2b806cf1720de24a7f51be2d71a8"}]}, 0x312) 06:28:37 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x48, 0x81, 0x7ff, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1f, 0x9}}) 06:28:37 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x48, 0x81, 0x7ff, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1f, 0x9}}) 06:28:37 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x48, 0x81, 0x7ff, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1f, 0x9}}) 06:28:37 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x81, 0x7ff, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1f, 0x9}}) [ 1096.451505][ T7444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:37 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) [ 1096.554829][ T7450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:37 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x48, 0x81, 0x7ff, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1f, 0x9}}) 06:28:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r3, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) (async, rerun: 32) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (rerun: 32) 06:28:37 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x13) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@mgmt_frame=@beacon={@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x4}, @device_b, @device_b, @initial, {0x9, 0x9}}, @ver_80211n={0x0, 0xd1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1, @random=0x401, 0xa01, @void, @void, @val={0x3, 0x1, 0x70}, @void, @val={0x6, 0x2, 0x1000}, @val={0x5, 0xd5, {0x0, 0xc8, 0x3f, "83cc0584a1372f2024441c8e33b0b799b3af65a52bb1b38a9f979c5ad22239748ee718b8bac4ed3c6e4f7e62d69e202628af1122d7f97e33ce02338a8c31817842a35788f2e168edd3be631d70c78d33855d999a59c84ac0ece3ba34dee8a9d0ccbbbe2925faef9d55d222bf6c923e1611a4ab5e1150329360165757ec9b3d59a7941a699a0b192f687ca4f7d3c471e54ee4df60dd0a581a0426c11bb049dd694bb93356884f0e85376be4d7d7f643cfa39905d103eec3358bd8488b073e21347231b13bdf6a457bc8b95497a57e7b17b638"}}, @void, @val={0x2a, 0x1, {0x1}}, @val={0x3c, 0x4, {0x0, 0x8e, 0x7a}}, @void, @void, @void, @void, [{0xdd, 0xd2, "05440c9d3c593a7582b89629ebeb24e3a9bfa8775b84cb492049fd3e6c9b5a8b925970ea5df099deb748dc6bfc2b1bdd7129793c28a6fb8e041123080bf0a45c6565fb31850079982bdf0e6e47e5fe562a6441d24c2d8026fb87047402a6b5142293fc0f71c4f38443d187dfc1d753400882d72741ee4e3da3dbe16bb612b16be84c63215c2ddd86a00934ac16eea21b65df0437d269f597070949e31742505de23497d196c25929aeefcc69566840695d3004ebf84380b28bcd6395b5a68dbb0961a469e67385a75839fda28bd35343163a"}, {0xdd, 0xe5, "9aeff4418b6da66e1c2a3b4563504d263e471ea69f394dae2d82f3885c3d33cc348f21f3cbc924915f2da222a65e6dab7eee043b38f7d613cb5307a0a010dbdd2cdf9bb220477881ffb7c3b4ceb1612ef5224ae8117419d461d7a038aab9c401692c691f3c82da101505a26024ad4642ad4733bd243668259a235413ff18ab972a2b2b4cb57ea50aa1b720909ef329eb05e8441337f653f3647d533448bcab21949bec02769f8a124c6384c180c47b7ecae030a691afa0cfd38379f81cd1c1baf687a6d161f517664bcc8bc535abc0f6fc8eef87a45f1b06d6aee39bf9453b7df5d4aa5b41"}]}, 0x2ca) 06:28:37 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1f, 0x9}}) 06:28:37 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1f, 0x9}}) 06:28:37 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x48, 0x81, 0x7ff, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1f, 0x9}}) [ 1096.651086][ T7453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:37 executing program 1: syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1f}, @broadcast, @broadcast, @random="3c5df8a00015", {0x0, 0xe40}}, @ver_80211n={0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x2, 0x2e, @default, @val={0x1, 0x7, [{0xb, 0x1}, {0x2}, {0x3}, {0x9}, {0x18, 0x1}, {0x2}, {0x36, 0x1}]}, @void, [{0xdd, 0xb4, "38231748f3c7e4dc62e9b5b23b2a31210df3035de6991d8acc05943c4e351906309289485fa33af0acf466021560fff9a3f3f013df35138c50bd830212e7b79e90bfd6cf25df7ea58c37a516663f07675fcd85d996fddec0678c1beaf1bdc2c56dafb42aeebfc79cc62b782e24755dee10d04bf96142ef8f9325caf5a25788cb37209775fbaef3e080e60e2ea3a0cf06628cfa65f40f8147eb033a005ae4ec495d8d54f2e704f8163e5ead747b34e4174a16d1b1"}, {0xdd, 0xfd, "74505bbd9fd0e4360c3f19664f69e9bec2ec7c0a8acc9a5e5703b2aedee07e65d74b5dac88a1095e6bcbd7ba7dc04abd1bd4dbb643862c2372c3874419d8ad84af1e901ed5cc55867124b52b1dd4f7fc59bb19c101b36cd05e55e35211147a0b220fe83152d6be16f2020dc51fb378194a854f2386042667ae2ef00288c281a606e0397ae7afd255a1718bfafed1ef3e8abb4ec5e813edb121b4c0bc3152e0997c30313f82f0a306a9b4931431a5bdeccacb26fa69d5387decc7b1a5a153d58dcaccb6d88a1e090c705efac7450475bc0c55fa4c72f48082c673c57f02ee152f102353edeb4720f43633ed16c9a8fe080ab886a5bac7a0e56e0ec901f5"}, {0xdd, 0x89, "154731d48196d8c0d79961388aaba241512ebfc69d5c81f460d47c765fef6aff6bb0ffce07966e1a9de09be57e6800096259eaf432d1d20fb5e6691ff07814b2fcf25e21d6b438b520c7e49e4e4734aafc53584ceae979f5e7af361173b11d8cafdd50954be227861010303dc0d82bfde22e974b33f412b7b6b3960853bee4684d5c424087fbb2518e"}, {0xdd, 0xa5, "949c7f89bbe21bccc7a7530de36eda82ac28a125d43ecbea45cb09b0f837bcfb65e6e37bac22c5149db8f0fbcac348b8d06062499fee3fad7e50fa05458ec539bf32b9eeeb1e03b0634f0da67b17020dcad9fd5e59ac1f13864995a4e26dbbbb48c86a532a4f875403b9c6adc686be6f96d37197778966531ec2f3efb5bf9ac541bf60f8f6f4c6d1a8e55b99cc9a31d577f9b468f4e42f2b806cf1720de24a7f51be2d71a8"}]}, 0x312) 06:28:37 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x30}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1f, 0x9}}) 06:28:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r3, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) 06:28:37 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x48, 0x81, 0x7ff, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1f, 0x9}}) 06:28:37 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1f, 0x9}}) [ 1096.791186][ T7474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1096.809440][ T7471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:37 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:37 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x48, 0x81, 0x7ff, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1f, 0x9}}) 06:28:37 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private2, 0x1, 0x8, 0x1f, 0x9}}) [ 1096.909461][ T7483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:37 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x800) 06:28:37 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private2, 0x0, 0x8, 0x1f, 0x9}}) 06:28:37 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 06:28:37 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private2, 0x0, 0x0, 0x1f, 0x9}}) [ 1097.010450][ T7489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:37 executing program 1: syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000400)=@mgmt_frame=@assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1f}, @broadcast, @broadcast, @random="3c5df8a00015", {0x0, 0xe40}}, @ver_80211n={0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x2, 0x2e, @default, @val={0x1, 0x7, [{0xb, 0x1}, {0x2}, {0x3}, {0x9}, {0x18, 0x1}, {0x2}, {0x36, 0x1}]}, @void, [{0xdd, 0xb4, "38231748f3c7e4dc62e9b5b23b2a31210df3035de6991d8acc05943c4e351906309289485fa33af0acf466021560fff9a3f3f013df35138c50bd830212e7b79e90bfd6cf25df7ea58c37a516663f07675fcd85d996fddec0678c1beaf1bdc2c56dafb42aeebfc79cc62b782e24755dee10d04bf96142ef8f9325caf5a25788cb37209775fbaef3e080e60e2ea3a0cf06628cfa65f40f8147eb033a005ae4ec495d8d54f2e704f8163e5ead747b34e4174a16d1b1"}, {0xdd, 0xfd, "74505bbd9fd0e4360c3f19664f69e9bec2ec7c0a8acc9a5e5703b2aedee07e65d74b5dac88a1095e6bcbd7ba7dc04abd1bd4dbb643862c2372c3874419d8ad84af1e901ed5cc55867124b52b1dd4f7fc59bb19c101b36cd05e55e35211147a0b220fe83152d6be16f2020dc51fb378194a854f2386042667ae2ef00288c281a606e0397ae7afd255a1718bfafed1ef3e8abb4ec5e813edb121b4c0bc3152e0997c30313f82f0a306a9b4931431a5bdeccacb26fa69d5387decc7b1a5a153d58dcaccb6d88a1e090c705efac7450475bc0c55fa4c72f48082c673c57f02ee152f102353edeb4720f43633ed16c9a8fe080ab886a5bac7a0e56e0ec901f5"}, {0xdd, 0x89, "154731d48196d8c0d79961388aaba241512ebfc69d5c81f460d47c765fef6aff6bb0ffce07966e1a9de09be57e6800096259eaf432d1d20fb5e6691ff07814b2fcf25e21d6b438b520c7e49e4e4734aafc53584ceae979f5e7af361173b11d8cafdd50954be227861010303dc0d82bfde22e974b33f412b7b6b3960853bee4684d5c424087fbb2518e"}, {0xdd, 0xa5, "949c7f89bbe21bccc7a7530de36eda82ac28a125d43ecbea45cb09b0f837bcfb65e6e37bac22c5149db8f0fbcac348b8d06062499fee3fad7e50fa05458ec539bf32b9eeeb1e03b0634f0da67b17020dcad9fd5e59ac1f13864995a4e26dbbbb48c86a532a4f875403b9c6adc686be6f96d37197778966531ec2f3efb5bf9ac541bf60f8f6f4c6d1a8e55b99cc9a31d577f9b468f4e42f2b806cf1720de24a7f51be2d71a8"}]}, 0x312) 06:28:37 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 06:28:37 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private2, 0x0, 0x0, 0x0, 0x9}}) 06:28:37 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=ANY=[@ANYBLOB="c0a8ba0008505050500904f20d4dc02b00"/30], 0x1e) 06:28:37 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) [ 1097.144067][ T7497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1097.151628][ T7497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1097.162601][ T7498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:37 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_fd={0x18, 0xa}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:37 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private2}}) 06:28:37 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) [ 1097.255242][ T7506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:37 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x800) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x800) (async) 06:28:37 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@ctrl_frame=@cf_end_cf_ack={{}, {0x40}, @broadcast, @device_b}, 0x10) 06:28:37 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) [ 1097.355550][ T7512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:37 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) [ 1097.364999][ T7513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1097.372185][ T7512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1097.377407][ T7513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:38 executing program 1: syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) 06:28:38 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x48, 0x81, 0x7ff, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1f, 0x9}}) 06:28:38 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=ANY=[@ANYBLOB="c0a8ba0008505050500904f20d4dc02b00"/30], 0x1e) 06:28:38 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x81, 0x7ff, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1f, 0x9}}) [ 1097.497572][ T7521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1097.499044][ T7520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1097.504707][ T7521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:38 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1f, 0x9}}) 06:28:38 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_fd={0x18, 0xa}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:38 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1f, 0x9}}) [ 1097.601730][ T7530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:38 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x30}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1f, 0x9}}) 06:28:38 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x800) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x800) (async) 06:28:38 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@ctrl_frame=@cf_end_cf_ack={{}, {0x40}, @broadcast, @device_b}, 0x10) 06:28:38 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1f, 0x9}}) 06:28:38 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private2, 0x1, 0x8, 0x1f, 0x9}}) [ 1097.738596][ T7536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1097.749046][ T7536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1097.750565][ T7539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1097.769810][ T7539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:38 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=ANY=[@ANYBLOB="c0a8ba0008505050500904f20d4dc02b00"/30], 0x1e) 06:28:38 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private2, 0x0, 0x8, 0x1f, 0x9}}) 06:28:38 executing program 1: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=ANY=[@ANYBLOB="c0a8ba0008505050500904f20d4dc02b00"/30], 0x1e) [ 1097.841199][ T7545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1097.847028][ T7547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1097.849458][ T7545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:38 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private2, 0x0, 0x0, 0x1f, 0x9}}) [ 1097.864479][ T7547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:38 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private2, 0x0, 0x0, 0x0, 0x9}}) 06:28:38 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private2}}) 06:28:38 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_fd={0x18, 0xa}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:38 executing program 4: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@ctrl_frame=@cf_end_cf_ack={{}, {0x40}, @broadcast, @device_b}, 0x10) [ 1097.981016][ T7557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1097.987145][ T7557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:38 executing program 5: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 06:28:38 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@ctrl_frame=@cf_end_cf_ack={{}, {0x40}, @broadcast, @device_b}, 0x10) 06:28:38 executing program 5: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 06:28:38 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000200)) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000180), &(0x7f00000002c0)=ANY=[@ANYBLOB="b451adec9a72a6d320b47c000500ffffffffffff08021100000155fd815f55562698239384d3381450e940c7ce4fcedc80139178020000006f70613862eb1d2ac3a06e91af4e470ff4a247f8211199f3176ff2d9fed97b4ead55a328eabd981d0fbeaf10f752eb1cb659740e0cb0bf3df50e147244abbf81bc1db33627a7f1953089db5caa668d91116dd99ce3f2275094cbee9e737993dfad9284bfa63413dcaea51e542867788c"], 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x8, 0x4, 0x3}) r1 = syz_open_dev$vcsa(&(0x7f0000000240), 0x7fffffffffffffff, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r0, r1, 0x6}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r2, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x49bc}, @NBD_ATTR_BACKEND_IDENTIFIER={0xb, 0xa, '*$)&\'&('}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x4c}}, 0x0) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x80, r4, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xa}]}, 0x80}}, 0x200440e0) [ 1098.126757][ T7562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1098.147431][ T7563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1098.149877][ T7562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1098.158859][ T7563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:38 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@beacon={@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0x2}, @device_b, @device_b, @random="496a966a337d", {0xa, 0x9}}, @ver_80211n={0x0, 0x20a9, 0x2, 0x0, 0x0, 0x3, 0x1}}, 0x2, @default, 0x140, @val={0x0, 0x1a, @random="a1320767e387ca8d6d99f55aa9d173f2ecbe47204928a7970d14"}, @val={0x1, 0x1, [{0x48}]}, @val={0x3, 0x1, 0xad}, @val={0x4, 0x6, {0x7f, 0x4, 0x8, 0x5}}, @val={0x6, 0x2, 0x1}, @void, @val={0x25, 0x3, {0x0, 0xab, 0x5}}, @val={0x2a, 0x1, {0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x8, 0xaf, 0x9}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0xffffffffffffffff, 0x2, 0x6, 0x20}}, @void, [{0xdd, 0x6c, "a57dec24f97cfb7e5788b2aeb532eceafc4b6e944afa92139a43320351eb4c128f62321e34a47c66e65d2897acd5879b5ab8b58e7dfe63d0f73e0e79e5a40bff99f6eec7749f6014955f700dd975591e3bf0fdeaa03357cd9e72c0c898bada4faed12aa808363ab89277c9de"}, {0xdd, 0xc6, "76a858cff1d624590971bb6ca7b932b6a6a4b61d2f9624871fcb2760559fb8b7abad671106b5f0616da65e960c95b2f1fa9b1d9f825e72eb97a55929acdd3be1fbafe49c786289a6f28e4c6c059cf8458b06a58f2052d9122b85d49cdb341b807b3a3d5eecc12f4c010051c2107ec2c3a6ffd6b32645b275e7c8ba4e6fcf74126b4f5d4e0091f353b1aa1e7fa2ac43836c65e1182f3aecc6ed0fbaf85a3533a066edc2989d9265a3b67ba7267c93c1c79ec122e5262a780c08a2d03cc82113808c6d1a6adb38"}]}, 0x1ab) 06:28:38 executing program 1: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=ANY=[@ANYBLOB="c0a8ba0008505050500904f20d4dc02b00"/30], 0x1e) 06:28:38 executing program 5: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) [ 1098.208651][ T7567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1098.216640][ T7567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1098.228550][ T7569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1098.236844][ T7569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:38 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:38 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:38 executing program 4: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@ctrl_frame=@cf_end_cf_ack={{}, {0x40}, @broadcast, @device_b}, 0x10) [ 1098.319769][ T7575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:38 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) [ 1098.329736][ T7575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:38 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_fd={0x18, 0xa}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:38 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_fd={0x18, 0xa}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:39 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r2, 0x21, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r3, 0x21, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r3, 0xffffffffffffffff]}, 0x80) 06:28:39 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xe, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_fd={0x18, 0xa}, @func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) [ 1098.482893][ T7587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:39 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000200)) (async, rerun: 32) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) (async, rerun: 32) syz_80211_inject_frame(&(0x7f0000000180), &(0x7f00000002c0)=ANY=[@ANYBLOB="b451adec9a72a6d320b47c000500ffffffffffff08021100000155fd815f55562698239384d3381450e940c7ce4fcedc80139178020000006f70613862eb1d2ac3a06e91af4e470ff4a247f8211199f3176ff2d9fed97b4ead55a328eabd981d0fbeaf10f752eb1cb659740e0cb0bf3df50e147244abbf81bc1db33627a7f1953089db5caa668d91116dd99ce3f2275094cbee9e737993dfad9284bfa63413dcaea51e542867788c"], 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x8, 0x4, 0x3}) (async, rerun: 64) r1 = syz_open_dev$vcsa(&(0x7f0000000240), 0x7fffffffffffffff, 0x0) (rerun: 64) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r0, r1, 0x6}, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r2, 0x0, 0x0) (async, rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x49bc}, @NBD_ATTR_BACKEND_IDENTIFIER={0xb, 0xa, '*$)&\'&('}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x4c}}, 0x0) (async, rerun: 32) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 32) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x80, r4, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xa}]}, 0x80}}, 0x200440e0) 06:28:39 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@beacon={@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0x2}, @device_b, @device_b, @random="496a966a337d", {0xa, 0x9}}, @ver_80211n={0x0, 0x20a9, 0x2, 0x0, 0x0, 0x3, 0x1}}, 0x2, @default, 0x140, @val={0x0, 0x1a, @random="a1320767e387ca8d6d99f55aa9d173f2ecbe47204928a7970d14"}, @val={0x1, 0x1, [{0x48}]}, @val={0x3, 0x1, 0xad}, @val={0x4, 0x6, {0x7f, 0x4, 0x8, 0x5}}, @val={0x6, 0x2, 0x1}, @void, @val={0x25, 0x3, {0x0, 0xab, 0x5}}, @val={0x2a, 0x1, {0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x8, 0xaf, 0x9}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0xffffffffffffffff, 0x2, 0x6, 0x20}}, @void, [{0xdd, 0x6c, "a57dec24f97cfb7e5788b2aeb532eceafc4b6e944afa92139a43320351eb4c128f62321e34a47c66e65d2897acd5879b5ab8b58e7dfe63d0f73e0e79e5a40bff99f6eec7749f6014955f700dd975591e3bf0fdeaa03357cd9e72c0c898bada4faed12aa808363ab89277c9de"}, {0xdd, 0xc6, "76a858cff1d624590971bb6ca7b932b6a6a4b61d2f9624871fcb2760559fb8b7abad671106b5f0616da65e960c95b2f1fa9b1d9f825e72eb97a55929acdd3be1fbafe49c786289a6f28e4c6c059cf8458b06a58f2052d9122b85d49cdb341b807b3a3d5eecc12f4c010051c2107ec2c3a6ffd6b32645b275e7c8ba4e6fcf74126b4f5d4e0091f353b1aa1e7fa2ac43836c65e1182f3aecc6ed0fbaf85a3533a066edc2989d9265a3b67ba7267c93c1c79ec122e5262a780c08a2d03cc82113808c6d1a6adb38"}]}, 0x1ab) [ 1098.531401][ T7589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1098.542167][ T7591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:39 executing program 1: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=ANY=[@ANYBLOB="c0a8ba0008505050500904f20d4dc02b00"/30], 0x1e) 06:28:39 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xd, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_fd={0x18, 0xa}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) [ 1098.557589][ T7593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1098.561785][ T7596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1098.568821][ T7596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1098.571853][ T7598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:39 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xb, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:39 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x9, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:39 executing program 4: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@ctrl_frame=@cf_end_cf_ack={{}, {0x40}, @broadcast, @device_b}, 0x10) 06:28:39 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) [ 1098.678087][ T7605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1098.685263][ T7605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:39 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x7, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:39 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x6, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:39 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r2, 0x21, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r3, 0x21, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r3, 0xffffffffffffffff]}, 0x80) 06:28:39 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) [ 1098.822674][ T7614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:39 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:39 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '!'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x44}}, 0x41) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40c1, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x48, 0x81, 0x7ff, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1f, 0x9}}) 06:28:39 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@beacon={@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0x2}, @device_b, @device_b, @random="496a966a337d", {0xa, 0x9}}, @ver_80211n={0x0, 0x20a9, 0x2, 0x0, 0x0, 0x3, 0x1}}, 0x2, @default, 0x140, @val={0x0, 0x1a, @random="a1320767e387ca8d6d99f55aa9d173f2ecbe47204928a7970d14"}, @val={0x1, 0x1, [{0x48}]}, @val={0x3, 0x1, 0xad}, @val={0x4, 0x6, {0x7f, 0x4, 0x8, 0x5}}, @val={0x6, 0x2, 0x1}, @void, @val={0x25, 0x3, {0x0, 0xab, 0x5}}, @val={0x2a, 0x1, {0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x8, 0xaf, 0x9}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0xffffffffffffffff, 0x2, 0x6, 0x20}}, @void, [{0xdd, 0x6c, "a57dec24f97cfb7e5788b2aeb532eceafc4b6e944afa92139a43320351eb4c128f62321e34a47c66e65d2897acd5879b5ab8b58e7dfe63d0f73e0e79e5a40bff99f6eec7749f6014955f700dd975591e3bf0fdeaa03357cd9e72c0c898bada4faed12aa808363ab89277c9de"}, {0xdd, 0xc6, "76a858cff1d624590971bb6ca7b932b6a6a4b61d2f9624871fcb2760559fb8b7abad671106b5f0616da65e960c95b2f1fa9b1d9f825e72eb97a55929acdd3be1fbafe49c786289a6f28e4c6c059cf8458b06a58f2052d9122b85d49cdb341b807b3a3d5eecc12f4c010051c2107ec2c3a6ffd6b32645b275e7c8ba4e6fcf74126b4f5d4e0091f353b1aa1e7fa2ac43836c65e1182f3aecc6ed0fbaf85a3533a066edc2989d9265a3b67ba7267c93c1c79ec122e5262a780c08a2d03cc82113808c6d1a6adb38"}]}, 0x1ab) 06:28:39 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000200)) (async) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) (async, rerun: 64) syz_80211_inject_frame(&(0x7f0000000180), &(0x7f00000002c0)=ANY=[@ANYBLOB="b451adec9a72a6d320b47c000500ffffffffffff08021100000155fd815f55562698239384d3381450e940c7ce4fcedc80139178020000006f70613862eb1d2ac3a06e91af4e470ff4a247f8211199f3176ff2d9fed97b4ead55a328eabd981d0fbeaf10f752eb1cb659740e0cb0bf3df50e147244abbf81bc1db33627a7f1953089db5caa668d91116dd99ce3f2275094cbee9e737993dfad9284bfa63413dcaea51e542867788c"], 0x10) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x2, 0x8, 0x4, 0x3}) r1 = syz_open_dev$vcsa(&(0x7f0000000240), 0x7fffffffffffffff, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r0, r1, 0x6}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r2, 0x0, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x49bc}, @NBD_ATTR_BACKEND_IDENTIFIER={0xb, 0xa, '*$)&\'&('}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x4c}}, 0x0) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x80, r4, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xa}]}, 0x80}}, 0x200440e0) 06:28:39 executing program 4: syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x5f) ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, &(0x7f0000000280)={0x0, 0x3, &(0x7f00000001c0)=[0x8, 0x1ff, 0x4], &(0x7f0000000200)=[0x2, 0x0, 0x7, 0x7, 0x8, 0x9, 0x400], &(0x7f0000000240)=[0x400, 0x0, 0x2, 0x0, 0x9d48]}) [ 1099.013914][ T7617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1099.033138][ T7621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:39 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) [ 1099.047454][ T7622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1099.064037][ T7623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1099.069859][ T7624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1099.083708][ T7620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:39 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:39 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@func]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:39 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r2, 0x21, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r3, 0x21, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r3, 0xffffffffffffffff]}, 0x80) 06:28:39 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@func]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) [ 1099.166286][ T7636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:39 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@func]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:39 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, 0x0, 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:39 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, 0x0, 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:39 executing program 1: syz_80211_inject_frame(&(0x7f0000000040), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000001800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001840)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001ac0)={0xe0, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}, {{0x8}, {0x4}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x400c000) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x312200ef}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x841}, 0x800) [ 1099.352539][ T7646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:39 executing program 0: getpgid(0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) [ 1099.399691][ T7648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1099.745258][ T1376] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.808645][ T1376] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.860422][ T1376] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.929510][ T1376] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.776183][ T5992] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1100.778668][ T5992] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1100.781966][ T5992] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1100.784846][ T5992] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1100.786624][ T5992] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1101.013954][ T7684] chnl_net:caif_netlink_parms(): no params data found [ 1101.051715][ T7684] bridge0: port 1(bridge_slave_0) entered blocking state [ 1101.055456][ T7684] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.057128][ T7684] bridge_slave_0: entered allmulticast mode [ 1101.059153][ T7684] bridge_slave_0: entered promiscuous mode [ 1101.062708][ T7684] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.065545][ T7684] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.067206][ T7684] bridge_slave_1: entered allmulticast mode [ 1101.068993][ T7684] bridge_slave_1: entered promiscuous mode [ 1101.165841][ T7684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1101.171411][ T7684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1101.192695][ T7684] team0: Port device team_slave_0 added [ 1101.244856][ T1376] hsr_slave_0: left promiscuous mode [ 1101.273638][ T1376] hsr_slave_1: left promiscuous mode [ 1101.363571][ T1376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1101.365414][ T1376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1101.370985][ T1376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1101.372663][ T1376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1101.377573][ T1376] bridge_slave_1: left allmulticast mode [ 1101.378915][ T1376] bridge_slave_1: left promiscuous mode [ 1101.380295][ T1376] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.424254][ T1376] bridge_slave_0: left allmulticast mode [ 1101.425638][ T1376] bridge_slave_0: left promiscuous mode [ 1101.427011][ T1376] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.583477][ T1376] veth1_macvtap: left promiscuous mode [ 1101.584773][ T1376] veth0_macvtap: left promiscuous mode [ 1101.586218][ T1376] veth1_vlan: left promiscuous mode [ 1101.587427][ T1376] veth0_vlan: left promiscuous mode [ 1101.757260][ T1376] team0 (unregistering): Port device team_slave_1 removed [ 1101.765368][ T1376] team0 (unregistering): Port device team_slave_0 removed [ 1101.771733][ T1376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1101.833767][ T1376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1101.979747][ T1376] bond0 (unregistering): Released all slaves [ 1102.070411][ T7684] team0: Port device team_slave_1 added [ 1102.100058][ T7684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1102.101662][ T7684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1102.108606][ T7684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1102.114303][ T7684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1102.115870][ T7684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1102.121726][ T7684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1102.189540][ T7684] hsr_slave_0: entered promiscuous mode [ 1102.234487][ T7684] hsr_slave_1: entered promiscuous mode [ 1102.814334][ T5992] Bluetooth: hci4: command 0x0409 tx timeout [ 1102.992954][ T7684] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1103.045148][ T7684] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1103.094916][ T7684] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1103.137145][ T7684] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1103.242698][ T7684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1103.256229][T19074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1103.258901][T19074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1103.268538][ T7684] 8021q: adding VLAN 0 to HW filter on device team0 [ 1103.276703][T19074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1103.278906][T19074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1103.281142][T19074] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.282757][T19074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1103.290777][T19074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1103.309426][ T6055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1103.311787][ T6055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1103.316275][ T6055] bridge0: port 2(bridge_slave_1) entered blocking state [ 1103.317851][ T6055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1103.319798][ T6055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1103.322517][ T6055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1103.339566][ T7684] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1103.342055][ T7684] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1103.351622][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1103.354290][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1103.356440][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1103.358753][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1103.361106][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1103.363117][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1103.377025][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1103.379346][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1103.385046][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1103.387282][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1103.555645][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1103.557588][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1103.563243][ T7684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1103.582781][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1103.586104][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1103.609843][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1103.611897][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1103.614815][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1103.616873][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1103.621145][ T7684] veth0_vlan: entered promiscuous mode [ 1103.628953][ T7684] veth1_vlan: entered promiscuous mode [ 1103.652811][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1103.654878][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1103.657070][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1103.659316][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1103.666213][ T7684] veth0_macvtap: entered promiscuous mode [ 1103.670279][ T7684] veth1_macvtap: entered promiscuous mode [ 1103.690880][ T7684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1103.694712][ T7684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.696835][ T7684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1103.699253][ T7684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.701536][ T7684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1103.706630][ T7684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.708815][ T7684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1103.711258][ T7684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.714866][ T7684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1103.717395][ T7684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.720738][ T7684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1103.726688][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1103.728891][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1103.731062][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1103.734249][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1103.738322][ T7684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1103.740507][ T7684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.742814][ T7684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1103.747199][ T7684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.749405][ T7684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1103.751785][ T7684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.755498][ T7684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1103.757747][ T7684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.759958][ T7684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1103.762080][ T7684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.766231][ T7684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1103.768514][T19074] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1103.770793][T19074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1103.776287][ T7684] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.778786][ T7684] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.780758][ T7684] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.782777][ T7684] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.841480][ T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1103.843833][ T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1103.846735][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1103.872828][ T210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1103.874736][ T210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1103.884362][T19074] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1104.057656][ T7782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1104.062537][ T7782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1104.085657][ T7782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1104.089199][ T7782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1104.097109][ T7782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '!'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x44}}, 0x41) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40c1, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x48, 0x81, 0x7ff, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8, 0x1f, 0x9}}) 06:28:44 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, 0x0, 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:44 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r2, 0x21, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r3, 0xffffffffffffffff]}, 0x80) 06:28:44 executing program 1: syz_80211_inject_frame(&(0x7f0000000040), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000001800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001840)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001ac0)={0xe0, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}, {{0x8}, {0x4}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x400c000) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x312200ef}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x841}, 0x800) 06:28:44 executing program 0: getpgid(0xffffffffffffffff) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) 06:28:44 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r3, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r3, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7fff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xff}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x80) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) 06:28:44 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) [ 1104.175516][ T7799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1104.178200][ T7796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1104.184678][ T7798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1104.188143][ T7795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1104.218905][ T7801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:44 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:44 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:44 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:44 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:45 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:45 executing program 4: r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) accept4$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) accept$phonet_pipe(r4, &(0x7f0000000440), &(0x7f0000000480)=0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) getpgid(0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) pipe2$watch_queue(&(0x7f0000000400), 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r5) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30000000"], 0x20}}, 0x0) 06:28:45 executing program 0: getpgid(0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) getpgid(0xffffffffffffffff) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) 06:28:45 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r2, 0x21, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:45 executing program 1: syz_80211_inject_frame(&(0x7f0000000040), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000001800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001840)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001ac0)={0xe0, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}, {{0x8}, {0x4}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x400c000) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x312200ef}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x841}, 0x800) 06:28:45 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r3, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r3, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7fff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xff}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x80) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_RECONFIGURE(r2, 0x0, 0x0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) (async) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r3, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r3, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7fff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xff}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) 06:28:45 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) [ 1104.583531][ T7826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1104.583553][ T7822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1104.614031][ T7830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1104.614731][ T7827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1104.639619][ T7836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:45 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:28:45 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r3, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r3, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7fff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xff}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x80) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_RECONFIGURE(r2, 0x0, 0x0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) (async) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r3, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r3, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7fff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xff}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) 06:28:45 executing program 4: syz_clone(0x2000100, 0x0, 0x36, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x9d27, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r1, 0x9d27, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r2, 0x9d27, 0x0, 0x0) sched_rr_get_interval(r2, &(0x7f0000000040)) 06:28:45 executing program 5: r0 = syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x3, &(0x7f0000000000)=0x5, &(0x7f0000000040)=0x5) ptrace$poke(0x5, r0, &(0x7f0000000080), 0x1) [ 1104.789770][ T7850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:45 executing program 3: syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0) [ 1104.894806][ T5992] Bluetooth: hci4: command 0x041b tx timeout 06:28:45 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:45 executing program 5: r0 = syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x3, &(0x7f0000000000)=0x5, &(0x7f0000000040)=0x5) ptrace$poke(0x5, r0, &(0x7f0000000080), 0x1) 06:28:45 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) brk(0x3) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, &(0x7f0000000140)=@ctrl_frame=@ba={{}, {0x5}, @broadcast, @device_a, @compressed={{0x0, 0x0, 0x1, 0x0, 0x5}, {0xe, 0x124}, "cda4789c838f3968"}}, 0x1c) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) [ 1104.958650][ T7864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1104.963775][ T7866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1104.978592][ T7868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.008599][ T7868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:45 executing program 1: syz_80211_inject_frame(&(0x7f0000000040), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000001800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001840)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001ac0)={0xe0, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}, {{0x8}, {0x4}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x400c000) [ 1105.066579][ T7878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:45 executing program 5: r0 = syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x3, &(0x7f0000000000)=0x5, &(0x7f0000000040)=0x5) ptrace$poke(0x5, r0, &(0x7f0000000080), 0x1) 06:28:45 executing program 5: r0 = syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x3, &(0x7f0000000000)=0x5, &(0x7f0000000040)=0x5) 06:28:45 executing program 4: r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) accept4$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) accept$phonet_pipe(r4, &(0x7f0000000440), &(0x7f0000000480)=0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r6 = getpgid(0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r10) sendmsg$IEEE802154_LIST_IFACE(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r12, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r9, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r12, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x1001c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) setsockopt$inet6_dccp_buf(r8, 0x21, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r5, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0xe3c4e312bb2ad62d}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x801}, 0x40010) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="9b0900000000000000001f0000000a0001007770614e30000000"], 0x20}}, 0x0) 06:28:45 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:45 executing program 3: syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0) 06:28:45 executing program 5: migrate_pages(0x0, 0x3, &(0x7f0000000000)=0x5, &(0x7f0000000040)=0x5) 06:28:45 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) brk(0x3) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, &(0x7f0000000140)=@ctrl_frame=@ba={{}, {0x5}, @broadcast, @device_a, @compressed={{0x0, 0x0, 0x1, 0x0, 0x5}, {0xe, 0x124}, "cda4789c838f3968"}}, 0x1c) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) [ 1105.357768][ T7894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.372644][ T7897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.379900][ T7898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.392806][ T7898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:46 executing program 1: syz_80211_inject_frame(&(0x7f0000000040), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000001800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001840)=0x14) 06:28:46 executing program 5: migrate_pages(0x0, 0x3, &(0x7f0000000000)=0x5, &(0x7f0000000040)=0x5) [ 1105.510084][ T7908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:46 executing program 5: migrate_pages(0x0, 0x3, &(0x7f0000000000)=0x5, &(0x7f0000000040)=0x5) 06:28:46 executing program 4: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) brk(0x3) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, &(0x7f0000000140)=@ctrl_frame=@ba={{}, {0x5}, @broadcast, @device_a, @compressed={{0x0, 0x0, 0x1, 0x0, 0x5}, {0xe, 0x124}, "cda4789c838f3968"}}, 0x1c) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) 06:28:46 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x3, &(0x7f0000000000)=0x5, &(0x7f0000000040)=0x5) 06:28:46 executing program 3: syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0) 06:28:46 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) [ 1105.699616][ T7918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.713807][ T7922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:46 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) brk(0x3) (async) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) (async) syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, &(0x7f0000000140)=@ctrl_frame=@ba={{}, {0x5}, @broadcast, @device_a, @compressed={{0x0, 0x0, 0x1, 0x0, 0x5}, {0xe, 0x124}, "cda4789c838f3968"}}, 0x1c) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) 06:28:46 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000000)=0x5, &(0x7f0000000040)=0x5) [ 1105.744906][ T7926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.760355][ T7930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.778287][ T7927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:46 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@ctrl_frame=@bar={{}, {0x81}, @device_b, @device_b, @basic={{0x0, 0x0, 0x0, 0x0, 0xa}, {0x7, 0xcb}}}, 0x14) 06:28:46 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000000)=0x5, &(0x7f0000000040)=0x5) [ 1105.850108][ T7939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.891000][ T7939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:46 executing program 1: syz_80211_inject_frame(&(0x7f0000000040), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) [ 1105.950300][ T7945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:46 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000000)=0x5, &(0x7f0000000040)=0x5) 06:28:46 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x0, &(0x7f0000000000)=0x5, &(0x7f0000000040)=0x5) 06:28:46 executing program 3: prctl$PR_SET_DUMPABLE(0x4, 0x2) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x0) [ 1106.124882][ T7954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:46 executing program 4: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) brk(0x3) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, &(0x7f0000000140)=@ctrl_frame=@ba={{}, {0x5}, @broadcast, @device_a, @compressed={{0x0, 0x0, 0x1, 0x0, 0x5}, {0xe, 0x124}, "cda4789c838f3968"}}, 0x1c) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) 06:28:46 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_fd={0x18, 0xa}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) [ 1106.167610][ T7959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:46 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x0, &(0x7f0000000000)=0x5, &(0x7f0000000040)=0x5) 06:28:46 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@ctrl_frame=@bar={{}, {0x81}, @device_b, @device_b, @basic={{0x0, 0x0, 0x0, 0x0, 0xa}, {0x7, 0xcb}}}, 0x14) [ 1106.268618][ T7966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1106.271490][ T7965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1106.278337][ T7967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:46 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x0, &(0x7f0000000000)=0x5, &(0x7f0000000040)=0x5) [ 1106.298526][ T7966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1106.307007][ T7965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:46 executing program 1: syz_80211_inject_frame(&(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) [ 1106.373051][ T7972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:47 executing program 3: prctl$PR_SET_DUMPABLE(0x4, 0x2) (async) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x0) 06:28:47 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x3, 0x0, &(0x7f0000000040)=0x5) 06:28:47 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_fd={0x18, 0xa}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) [ 1106.510074][ T7983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1106.536285][ T7985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:47 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x3, 0x0, &(0x7f0000000040)=0x5) 06:28:47 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x3, 0x0, &(0x7f0000000040)=0x5) 06:28:47 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@ctrl_frame=@bar={{}, {0x81}, @device_b, @device_b, @basic={{0x0, 0x0, 0x0, 0x0, 0xa}, {0x7, 0xcb}}}, 0x14) 06:28:47 executing program 4: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) brk(0x3) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, &(0x7f0000000140)=@ctrl_frame=@ba={{}, {0x5}, @broadcast, @device_a, @compressed={{0x0, 0x0, 0x1, 0x0, 0x5}, {0xe, 0x124}, "cda4789c838f3968"}}, 0x1c) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) 06:28:47 executing program 1: syz_80211_inject_frame(&(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) [ 1106.700668][ T7999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1106.708253][ T8002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1106.713694][ T8000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1106.722793][ T8004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1106.733624][ T8002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:47 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x5) 06:28:47 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x5) 06:28:47 executing program 3: prctl$PR_SET_DUMPABLE(0x4, 0x2) (async) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x0) 06:28:47 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_fd={0x18, 0xa}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:47 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x5) [ 1106.872461][ T8015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:47 executing program 2: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 06:28:47 executing program 2: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 06:28:47 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x3, &(0x7f0000000000)=0x5, 0x0) 06:28:47 executing program 2: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) [ 1106.983508][ T466] Bluetooth: hci4: command 0x040f tx timeout 06:28:47 executing program 0: pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r0) write$rfkill(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x0, 0x2, 0x1}, 0x8) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x0) [ 1107.051410][ T8031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:47 executing program 4: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) brk(0x3) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, &(0x7f0000000140)=@ctrl_frame=@ba={{}, {0x5}, @broadcast, @device_a, @compressed={{0x0, 0x0, 0x1, 0x0, 0x5}, {0xe, 0x124}, "cda4789c838f3968"}}, 0x1c) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) 06:28:47 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:47 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x3, &(0x7f0000000000)=0x5, 0x0) 06:28:47 executing program 1: syz_80211_inject_frame(&(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) [ 1107.076213][ T8035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1107.116976][ T8040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1107.136390][ T8040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:47 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) 06:28:47 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x3, &(0x7f0000000000)=0x5, 0x0) 06:28:47 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:47 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) [ 1107.221450][ T8047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:47 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x3, &(0x7f0000000000)=0x5, &(0x7f0000000040)) 06:28:47 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_fd={0x18, 0xa}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:47 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x3, &(0x7f0000000000)=0x5, &(0x7f0000000040)) 06:28:47 executing program 0: pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r0) write$rfkill(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x0, 0x2, 0x1}, 0x8) (async) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x0) [ 1107.408149][ T8060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:48 executing program 4: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) brk(0x3) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, &(0x7f0000000140)=@ctrl_frame=@ba={{}, {0x5}, @broadcast, @device_a, @compressed={{0x0, 0x0, 0x1, 0x0, 0x5}, {0xe, 0x124}, "cda4789c838f3968"}}, 0x1c) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) 06:28:48 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_fd={0x18, 0xa}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:48 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x3, &(0x7f0000000000)=0x5, &(0x7f0000000040)) 06:28:48 executing program 1: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) [ 1107.489976][ T8069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1107.496433][ T8069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:48 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) 06:28:48 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xe, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_fd={0x18, 0xa}, @func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:48 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x5) 06:28:48 executing program 1: socket$packet(0x11, 0x0, 0x300) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) 06:28:48 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xd, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_fd={0x18, 0xa}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) [ 1107.576165][ T8075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:48 executing program 1: socket$packet(0x11, 0x0, 0x300) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) 06:28:48 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x3, 0x0, &(0x7f0000000040)=0x5) 06:28:48 executing program 0: pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r0) (async) write$rfkill(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x0, 0x2, 0x1}, 0x8) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x0) [ 1107.731482][ T8088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:48 executing program 4: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) brk(0x3) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, &(0x7f0000000140)=@ctrl_frame=@ba={{}, {0x5}, @broadcast, @device_a, @compressed={{0x0, 0x0, 0x1, 0x0, 0x5}, {0xe, 0x124}, "cda4789c838f3968"}}, 0x1c) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) 06:28:48 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xb, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:48 executing program 1: socket$packet(0x11, 0x0, 0x300) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) 06:28:48 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x3, 0x0, &(0x7f0000000040)=0x5) [ 1107.846115][ T8098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1107.852336][ T8098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:48 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) 06:28:48 executing program 1: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) 06:28:48 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x9, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:48 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x3, 0x0, &(0x7f0000000040)=0x5) 06:28:48 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) [ 1107.913563][ T8105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:48 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x7, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:48 executing program 5: migrate_pages(0x0, 0x3, 0x0, &(0x7f0000000040)=0x5) 06:28:48 executing program 1: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) 06:28:48 executing program 4: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) brk(0x3) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, &(0x7f0000000140)=@ctrl_frame=@ba={{}, {0x5}, @broadcast, @device_a, @compressed={{0x0, 0x0, 0x1, 0x0, 0x5}, {0xe, 0x124}, "cda4789c838f3968"}}, 0x1c) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) 06:28:48 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x6, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:48 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r2, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x49bc}, @NBD_ATTR_BACKEND_IDENTIFIER={0xb, 0xa, '*$)&\'&('}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x4c, r4, 0x8, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '^+:}'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x18000000000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x49bc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x4c}}, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) r7 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x1, 0x48040) r8 = syz_open_dev$vcsa(&(0x7f0000000100), 0x1000, 0x204080) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r9, 0x21, 0x0, 0x0, 0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0xfffffffffffffcdb}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0x0, 0x4, 0x8000000000000001}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES]}, 0x7c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r10, 0x21, 0x0, 0x0, 0x0) read$smackfs_cipsonum(r10, &(0x7f0000000300), 0x14) 06:28:48 executing program 5: migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000040)=0x5) [ 1108.198490][ T8123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1108.211470][ T8119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1108.215337][ T8123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:48 executing program 3: syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x494401) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) 06:28:48 executing program 1: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) 06:28:48 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:48 executing program 5: migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000040)=0x5) [ 1108.271311][ T8130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:48 executing program 5: migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000040)=0x5) 06:28:48 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:48 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x3, 0x0, &(0x7f0000000040)=0x5) 06:28:48 executing program 5: migrate_pages(0x0, 0x3, 0x0, 0x0) 06:28:49 executing program 4: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) brk(0x3) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) 06:28:49 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x3, 0x0, &(0x7f0000000040)=0x5) 06:28:49 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:49 executing program 5: migrate_pages(0x0, 0x3, 0x0, 0x0) [ 1108.568028][ T8149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:49 executing program 3: syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x494401) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) 06:28:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NBD_CMD_RECONFIGURE(r2, 0x0, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) (rerun: 32) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x49bc}, @NBD_ATTR_BACKEND_IDENTIFIER={0xb, 0xa, '*$)&\'&('}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x4c}}, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x4c, r4, 0x8, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '^+:}'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x18000000000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x49bc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x4c}}, 0x0) (async) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) (async) r7 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x1, 0x48040) (async) r8 = syz_open_dev$vcsa(&(0x7f0000000100), 0x1000, 0x204080) (async) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r9, 0x21, 0x0, 0x0, 0x0) (async) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0xfffffffffffffcdb}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0x0, 0x4, 0x8000000000000001}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES]}, 0x7c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r10, 0x21, 0x0, 0x0, 0x0) (async, rerun: 64) read$smackfs_cipsonum(r10, &(0x7f0000000300), 0x14) (rerun: 64) 06:28:49 executing program 5: migrate_pages(0x0, 0x3, 0x0, 0x0) 06:28:49 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:49 executing program 5: migrate_pages(0x0, 0x3, 0x0, &(0x7f0000000040)) 06:28:49 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x3, 0x0, &(0x7f0000000040)=0x5) 06:28:49 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@func]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) [ 1108.665196][ T8162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:49 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@func]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:49 executing program 4: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) brk(0x3) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) 06:28:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r2, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) (rerun: 64) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x49bc}, @NBD_ATTR_BACKEND_IDENTIFIER={0xb, 0xa, '*$)&\'&('}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x4c, r4, 0x8, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '^+:}'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x18000000000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x0) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) (rerun: 64) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x49bc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x4c}}, 0x0) (async) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) r7 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x1, 0x48040) (async) r8 = syz_open_dev$vcsa(&(0x7f0000000100), 0x1000, 0x204080) (async) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r9, 0x21, 0x0, 0x0, 0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0xfffffffffffffcdb}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0x0, 0x4, 0x8000000000000001}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES]}, 0x7c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r10, 0x21, 0x0, 0x0, 0x0) (async) read$smackfs_cipsonum(r10, &(0x7f0000000300), 0x14) 06:28:49 executing program 5: migrate_pages(0x0, 0x3, 0x0, &(0x7f0000000040)) 06:28:49 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@func]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) [ 1108.932443][ T8181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1108.974964][ T2150] ieee802154 phy1 wpan1: encryption failed: -22 06:28:49 executing program 3: syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x494401) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) 06:28:49 executing program 1: migrate_pages(0x0, 0x3, 0x0, &(0x7f0000000040)=0x5) 06:28:49 executing program 5: migrate_pages(0x0, 0x3, 0x0, &(0x7f0000000040)) 06:28:49 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, 0x0, 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:49 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) brk(0x3) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) 06:28:49 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, 0x0, 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:49 executing program 1: migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000040)=0x5) [ 1109.047425][ T8191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1109.053938][ T5992] Bluetooth: hci4: command 0x0419 tx timeout 06:28:49 executing program 1: migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000040)=0x5) [ 1109.099603][ T8197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:49 executing program 4: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) 06:28:49 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x2, 0x46000) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)=[0x100, 0x81, 0xb789], &(0x7f0000000100)=[0xb, 0x5, 0x7ff, 0x7, 0x9, 0x38, 0x2008, 0x5, 0x1f, 0x9, 0x4f], &(0x7f0000000100)}) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) 06:28:49 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, 0x0, 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:49 executing program 1: migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000040)=0x5) [ 1109.288185][ T8206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1109.301527][ T8207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:49 executing program 3: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1b}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) 06:28:49 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:49 executing program 1: migrate_pages(0x0, 0x3, 0x0, 0x0) 06:28:49 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) [ 1109.417081][ T8213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:50 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) brk(0x3) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) 06:28:50 executing program 1: migrate_pages(0x0, 0x3, 0x0, 0x0) 06:28:50 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) [ 1109.448739][ T8219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:50 executing program 1: migrate_pages(0x0, 0x3, 0x0, 0x0) 06:28:50 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) 06:28:50 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:50 executing program 1: migrate_pages(0x0, 0x3, 0x0, &(0x7f0000000040)) 06:28:50 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x2, 0x46000) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)=[0x100, 0x81, 0xb789], &(0x7f0000000100)=[0xb, 0x5, 0x7ff, 0x7, 0x9, 0x38, 0x2008, 0x5, 0x1f, 0x9, 0x4f], &(0x7f0000000100)}) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040), 0x2, 0x46000) (async) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)=[0x100, 0x81, 0xb789], &(0x7f0000000100)=[0xb, 0x5, 0x7ff, 0x7, 0x9, 0x38, 0x2008, 0x5, 0x1f, 0x9, 0x4f], &(0x7f0000000100)}) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) [ 1109.647109][ T8229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1109.659203][ T8233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:50 executing program 3: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1b}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) 06:28:50 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:50 executing program 1: migrate_pages(0x0, 0x3, 0x0, &(0x7f0000000040)) 06:28:50 executing program 4: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) 06:28:50 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) brk(0x3) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) 06:28:50 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:50 executing program 1: migrate_pages(0x0, 0x3, 0x0, &(0x7f0000000040)) [ 1109.795322][ T8243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1109.819163][ T8251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:50 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:50 executing program 1: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) brk(0x3) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) 06:28:50 executing program 4: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) 06:28:50 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1109.887567][ T8255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:50 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x2, 0x46000) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)=[0x100, 0x81, 0xb789], &(0x7f0000000100)=[0xb, 0x5, 0x7ff, 0x7, 0x9, 0x38, 0x2008, 0x5, 0x1f, 0x9, 0x4f], &(0x7f0000000100)}) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) [ 1109.986670][ T8264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1109.988618][ T8265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:50 executing program 3: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1b}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) 06:28:50 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:50 executing program 4: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) 06:28:50 executing program 2: syz_80211_inject_frame(&(0x7f0000000040), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) 06:28:50 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) brk(0x3) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) [ 1110.187792][ T8274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1110.205631][ T8278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:50 executing program 1: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) [ 1110.226805][ T8279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1110.241137][ T8281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:50 executing program 4: socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) 06:28:50 executing program 4: socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) 06:28:50 executing program 4: socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) 06:28:50 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) 06:28:50 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) [ 1110.320816][ T8289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:50 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 06:28:51 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 06:28:51 executing program 3: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4008001) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) 06:28:51 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) brk(0x3) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) [ 1110.576223][ T8299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:51 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x1c, r2, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x1c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r4, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x49bc}, @NBD_ATTR_BACKEND_IDENTIFIER={0xb, 0xa, '*$)&\'&('}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r6, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, '%o-/-\''}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, '802.15.4 MAC\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c881}, 0x20000884) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r7, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x140000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x2004c080}, 0x14008081) 06:28:51 executing program 4: r0 = syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x104000, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r1, 0x9d27, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x5, 0x8, {r0}, {0xffffffffffffffff}, 0x86, 0x100000000}) 06:28:51 executing program 1: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:51 executing program 3: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4008001) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4008001) (async) pipe2$watch_queue(&(0x7f0000000400), 0x80) (async) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) (async) [ 1110.607726][ T8301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:51 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) 06:28:51 executing program 3: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4008001) (async) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) (rerun: 64) [ 1110.702757][ T8316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:51 executing program 3: syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0xfffffffffffffe0d) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x20000) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000080)={0x3, 0x0, 0x2, 0x8, 0x0, 0x8, 0xec4}) 06:28:51 executing program 2: syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x9d27, 0x0, 0x0) ptrace$getsig(0x4202, r0, 0x1f, &(0x7f00000000c0)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000000080), 0x4) migrate_pages(r3, 0x9d27, 0x0, 0x0) r4 = getuid() ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000040)={0xa, 0x3, {r3}, {r4}, 0x8, 0x10001}) 06:28:51 executing program 2: syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x9d27, 0x0, 0x0) ptrace$getsig(0x4202, r0, 0x1f, &(0x7f00000000c0)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000000080), 0x4) migrate_pages(r3, 0x9d27, 0x0, 0x0) r4 = getuid() ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000040)={0xa, 0x3, {r3}, {r4}, 0x8, 0x10001}) 06:28:51 executing program 4: r0 = syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x104000, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r1, 0x9d27, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x5, 0x8, {r0}, {0xffffffffffffffff}, 0x86, 0x100000000}) waitid(0x2, r2, 0x0, 0x1, 0x0) ioprio_get$pid(0x2, r1) 06:28:51 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) brk(0x3) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) [ 1110.922431][ T8341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:51 executing program 1: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @ldst={0x1, 0x3, 0x2, 0x9, 0x3, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xca, &(0x7f0000000140)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0xfff, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 06:28:51 executing program 2: socket(0x18, 0x8, 0x2) syz_clone(0x49833000, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() [ 1110.956291][ T8344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:51 executing program 2: socket(0x18, 0x8, 0x2) syz_clone(0x49833000, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() 06:28:51 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) [ 1111.029875][ T8350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:51 executing program 2: socket(0x18, 0x8, 0x2) syz_clone(0x49833000, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() 06:28:51 executing program 4: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0xb, &(0x7f0000000140)=0xfffff8f0, 0x4) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000080), 0x80) socket$inet6_dccp(0xa, 0x6, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r2, 0x21, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000080)}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x100, 0x6, 0x9, 0x0, 0x10001, 0x16fa, 0x6, 0x2}) 06:28:51 executing program 3: syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0xfffffffffffffe0d) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x20000) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000080)={0x3, 0x0, 0x2, 0x8, 0x0, 0x8, 0xec4}) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0xfffffffffffffe0d) (async) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) (async) syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x20000) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000080)={0x3, 0x0, 0x2, 0x8, 0x0, 0x8, 0xec4}) (async) [ 1111.110220][ T8356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:51 executing program 3: syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0xfffffffffffffe0d) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x20000) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000080)={0x3, 0x0, 0x2, 0x8, 0x0, 0x8, 0xec4}) 06:28:51 executing program 2: socket(0x18, 0x8, 0x2) syz_clone(0x49833000, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:51 executing program 2: socket(0x18, 0x8, 0x2) 06:28:51 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) brk(0x3) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) [ 1111.255954][ T8369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:51 executing program 1: syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0xfffffffffffffe0d) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x20000) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000080)={0x3, 0x0, 0x2, 0x8, 0x0, 0x8, 0xec4}) 06:28:51 executing program 2: socket(0x0, 0x8, 0x2) 06:28:51 executing program 2: socket(0x0, 0x8, 0x2) 06:28:51 executing program 0: syz_80211_inject_frame(&(0x7f0000000040), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000001380)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x5}, @initial, @device_b, @broadcast, {0x5, 0x2}}, @a_msdu=[{@broadcast, @broadcast, 0x3b, "81977c295057e0f938fae7193a2f8b53e0169cf3770ba322df41207c23a2f0629dd0164f26e70b3fae9957944186f87a4d922d9b94586f5f8060c9"}, {@broadcast, @device_b, 0x5a, "02107826e3345e928f64553cc2a10374cd672e676234fd92b2922ad919b8b62397035c95e85de2b77054524d6f55b382b6c66fa833cae0bd2c2107d23e5544d3d5984c44599a1ba4e27041230a85875239f241785d258e45ba7c"}, {@broadcast, @device_b, 0x86, "dc3750e6be9b5ba231cfb4fb4ce69b12c53d621e8d0182e51e3ff661d9ee85786b3a9267255a90df8457fc8b563b3beb251258435e7c578620c3964625ebcd707f82c4f7b1e7d5ffbccc178b2c9fcfc3b107e2fb3e1905b5b601d55d2b288e3a9e11a5aa04e2125bfc789fc928896738e5d24b396cf070b11c6955d80d97ff00b2c6f2e85510"}, {@broadcast, @broadcast, 0x87, "391ad679b6458697b4ef8ae49203ee5c593f7f4f72de46b9e4b60185b9f8378aefacf4cad36580a4f737858ae8d32ea774a79592f44bd9d41ececaf6d7c8356489d406dbdf0fe98416c3b9ab7edad88955d5d087a50b1f11476a8077213cd5213d6e0c23cab5203bfc400157568ea93d832f1c70b3f583bd9a37da1f7485e52d6cb3c536c1b39f"}, {@device_b, @broadcast, 0x1000, "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"}, {@device_b, @device_b, 0x89, "39bcd43dcc566167d02bff564da86b6bb22ef92f77f7cfdd9c35dcfce140627105b2b05117cfcf0d767b5fbab6b6c5c24346c13178017676b387412cb6bd1eeacf9990606913061c341ba1bc5e6a17a0d1ecee9c652f9b5ca7c84ef39f149b7ba5e1f5ed10474c8bbc144cdc86d5e7b08c7bf5cac638ffd88d1051884408939e23b5ae4d0000000000"}]}, 0x12a0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f00000000c0)=@ctrl_frame=@cts={{}, {0x3}, @broadcast}, 0xa) [ 1111.362325][ T8379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.370459][ T8379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:51 executing program 2: socket(0x0, 0x8, 0x2) 06:28:52 executing program 4: r0 = syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x2, 0x130001) getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0) setuid(r2) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000040)={0x8, 0x10000, {r0}, {r2}, 0x8, 0x100}) syz_clone(0x1c10a000, &(0x7f0000000080)="754c99df09b3a48122a9de6ef3c945d12bc732380b973028de0b2ac78a2ba15fc35377771c2618076c264709e7b45498cbf6513d281a85ce5477e438624889e9ee0f3bb3f59dc9dbcbff93dfd0064bd6fb84e77ae33c11bcc11cb5e651", 0x5d, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="84ecc66bf34c4cf359861cb848cc919427891740ffc518faefddfb27a9ed9cb2a5f8a7c1dba44895be6bf56283c283c770741f451ba8a8bac6c170a4e3a5e07ba0d412505e33ef5856524d6c0d8b1553b19b28aee3790a6155932a3d3719ca2020a2078919861194") 06:28:52 executing program 2: socket(0x18, 0x0, 0x2) 06:28:52 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x0) [ 1111.482176][ T8390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:52 executing program 4: r0 = syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x2, 0x130001) getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0) setuid(r2) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000040)={0x8, 0x10000, {r0}, {r2}, 0x8, 0x100}) syz_clone(0x1c10a000, &(0x7f0000000080)="754c99df09b3a48122a9de6ef3c945d12bc732380b973028de0b2ac78a2ba15fc35377771c2618076c264709e7b45498cbf6513d281a85ce5477e438624889e9ee0f3bb3f59dc9dbcbff93dfd0064bd6fb84e77ae33c11bcc11cb5e651", 0x5d, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="84ecc66bf34c4cf359861cb848cc919427891740ffc518faefddfb27a9ed9cb2a5f8a7c1dba44895be6bf56283c283c770741f451ba8a8bac6c170a4e3a5e07ba0d412505e33ef5856524d6c0d8b1553b19b28aee3790a6155932a3d3719ca2020a2078919861194") 06:28:52 executing program 2: socket(0x18, 0x0, 0x0) 06:28:52 executing program 2: socket(0x18, 0x0, 0x0) 06:28:52 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) [ 1111.587874][ T8400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:52 executing program 1: syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0xfffffffffffffe0d) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x20000) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000080)={0x3, 0x0, 0x2, 0x8, 0x0, 0x8, 0xec4}) 06:28:52 executing program 2: socket(0x18, 0x0, 0x0) 06:28:52 executing program 4: r0 = syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x2, 0x130001) getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0) setuid(r2) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000040)={0x8, 0x10000, {r0}, {r2}, 0x8, 0x100}) syz_clone(0x1c10a000, &(0x7f0000000080)="754c99df09b3a48122a9de6ef3c945d12bc732380b973028de0b2ac78a2ba15fc35377771c2618076c264709e7b45498cbf6513d281a85ce5477e438624889e9ee0f3bb3f59dc9dbcbff93dfd0064bd6fb84e77ae33c11bcc11cb5e651", 0x5d, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="84ecc66bf34c4cf359861cb848cc919427891740ffc518faefddfb27a9ed9cb2a5f8a7c1dba44895be6bf56283c283c770741f451ba8a8bac6c170a4e3a5e07ba0d412505e33ef5856524d6c0d8b1553b19b28aee3790a6155932a3d3719ca2020a2078919861194") 06:28:52 executing program 0: syz_80211_inject_frame(&(0x7f0000000040), 0x0, 0x0) (async, rerun: 64) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000001380)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x5}, @initial, @device_b, @broadcast, {0x5, 0x2}}, @a_msdu=[{@broadcast, @broadcast, 0x3b, "81977c295057e0f938fae7193a2f8b53e0169cf3770ba322df41207c23a2f0629dd0164f26e70b3fae9957944186f87a4d922d9b94586f5f8060c9"}, {@broadcast, @device_b, 0x5a, "02107826e3345e928f64553cc2a10374cd672e676234fd92b2922ad919b8b62397035c95e85de2b77054524d6f55b382b6c66fa833cae0bd2c2107d23e5544d3d5984c44599a1ba4e27041230a85875239f241785d258e45ba7c"}, {@broadcast, @device_b, 0x86, "dc3750e6be9b5ba231cfb4fb4ce69b12c53d621e8d0182e51e3ff661d9ee85786b3a9267255a90df8457fc8b563b3beb251258435e7c578620c3964625ebcd707f82c4f7b1e7d5ffbccc178b2c9fcfc3b107e2fb3e1905b5b601d55d2b288e3a9e11a5aa04e2125bfc789fc928896738e5d24b396cf070b11c6955d80d97ff00b2c6f2e85510"}, {@broadcast, @broadcast, 0x87, "391ad679b6458697b4ef8ae49203ee5c593f7f4f72de46b9e4b60185b9f8378aefacf4cad36580a4f737858ae8d32ea774a79592f44bd9d41ececaf6d7c8356489d406dbdf0fe98416c3b9ab7edad88955d5d087a50b1f11476a8077213cd5213d6e0c23cab5203bfc400157568ea93d832f1c70b3f583bd9a37da1f7485e52d6cb3c536c1b39f"}, {@device_b, @broadcast, 0x1000, "17c63210e044243a8f1173b3b6e341e132ab6ad8d000d1edf6547b367a04332c19bc603e9f639642d089198209d03ca1dfb8e04daff3db275f3643e056c4a70a53d06558574e6867f96e3d81c5308561bea50d967561e54b5f5f18f6b4a748f9e3be12a78c0447d4092567d97ce6db26bd29105dfcaaff98808f5b5505c6b87fc4377b5886a5c5fad661a2abde891502deca37e07744d01af3cf2c65ba9be3220409f8276bba752f4c6be1a9f54f177fc3e2ba47e1a332e8730ae7cd4b2a72ecd519e9b2882bc46978af2638abfdcff95a18326dcbdcce4bd53738bba59fdadff78205c6f25ee36726da2e471e319f93e6bae3e5002533903e1a23eb1fcf356cd106b0bf462469e8cec510346466dc25446c19807f35f8a6f055801ce780c3fe0e54b23d162544a4c28ea1c08f1520d70f8afe844924eae87cc3ca92e02e5e825b5c5535ee0679b85eb01c027cb166d9d907cbb23ef2612ea55b8ccb834715a3a1b506e685fbd95185f2c73d504487cc50df4969e2c8f06de76168c655d36cfcea54703548ca1b7e1b45870c3ddbc6754cdbc2a7f756697702b85de1c4e33ecc03b3286208067f6f2c98793147cdf6e09aa3d221b1d3f25b0297a44d9a650034e918bbc7dfe1a4e5af65f33ddd0ca60c11d3a122cd5fa57baeff47da2836e261fc48748cad4a2c412a1bf11d72a62593d82f0df572e628b7cca77f257ea4bc87661562588d95b728dc17ee42b9e9c50d35076b39934dff48f7b74a27f81e125a001cf56e5550bd9db11067c78667f7e53ae475f0ab23490e5ae3c99e01916c7665b8c881b365959ddeff8165c9ba4dd2074189c1e8b33d3b6cfe2c25fbeb857d9f0b17acf7622df040180f42aec429484f0b8dd7e656e8cfa6012942428370a189b11ee9cc780ac0f600e4719692754cb4caa21f2924f17ab45e26ddd0e5e51a45b1331af660bd62e5403923114945fd71104a9ec4ee51dfcf448f2dd990c6da9fad4a5f26f8a7fb806a712133758cbe5ef975b772de7a25740abbf904968b6a438d2c27c792597bdd51aa26633d38c12c3429ecd07d651f105681abb856c9299cd15678afe8167423ae50757496237f6a215d43fcbf7e2a33c4e5396c2cd69a261eb9f46558b678f71df0f525c7186c72338ac04b249c92d5eacc0c676047ef6740aa684f8f8b70e9882ae8cfa0245331499ec8a6e7f6d4b801eaa034fe261fd9b700d0e6519b0c007d32908cd811c9e9b88c97e1ef081e46c034f6c371c2389c0248a4fd2bfbab5d47c1b858625b802b8735670eb7618684c192c5a0f514d1a809009026a2dd502bd161a28e37bebe211164710d578f63be710bbc6b27ede6b277f7cf999d3fd7d19782e071605c17b9e9162c2716668f5de931c6f5a0727612ce2ebe818d5d956afc17f8d4cb0bd7460634237e30095b333b326f09a2093c74549731f250ed91b88a88c979af3663cc6ff3084ba143190cc8fceadb74ca0c9825e93c25a0a42e8f2601c2461239e86dc84186530ad365773ff8182c082814b5e6bf370b7865c6aec6083eb38cf41f1e74351d4e7847581769aea88c8c288b6993a22b5e5e0fd2eca743a48af90c5c2645f1931de69a93c44ba42baf9e3211e6df27e1e89e8dba2ead88bb5dba56fd1c12f2f3c8473a568e27e5c349c4d9c138f409e8cda3553f8605275c7feec81b1232cbe94364de4a4e57f65d8d14b45eca39be5bd43b48cf7ccdb4b980946f3cf2404ede26816de5d8fad9c463e201e6c8d7d2e2a531d65d8f425bc7586aed2641b4ed57e3730812f490dae8ddb9e551897a212a843c93ef9b6c5e43b94f9f7b4cbef25b1f442fbdd647b861594089d61116ce1901f39dc4837dea3060673228050ddc5b1b9fc619394a200659d17d7d759af00818ac85b0b622655b5665c95449ded290b57097751d2f72c1947cb591f075ece50665ed6a0668df223eaf0b92acc6d69eeadd884397d1e1b0d16194327bdf3956ecd45e92b0b441c9f2c70aa444709f7306843162a4fabaef1ca5aabe3dc77a428353b724dfb80fb5646e180a0bd7bdb0d0c4780d4170a65b5ba60da2d31202b13bdf70dec781e883359edd9e1756d1a04bdc598e90b1c4772b42cc0c3f3be44b09212ccb2c9ab33127bf632d6efd3fe09906b75b1e2207fbbd6c3b9630414514fac0c333e35533691f9b780763edeb2e81149f5160a729c96ba63552f2448e8bf95e1c015458272ac2b55743bf2743f52f6782fbadb444dfd0d2de45f634cc5ee8783430165043f4d165a9c483a9bd6e392208b9ebe9926ffe60a13da9e00fc5e0a2025000a5f8eb70cbe08200e37d38864a7ef9330253bb9709bca3b79502fc3f8f0b1869999427c30a4902fbbc658d60bf39d6d1a9cd6dd11bdcc08b04a8abeb6b4be028ad396e7c10c4c93373e5c9bacaabcf8e8d619b418cf9819dad021b0ee09664b484153055670233e8c5a62098d572342a6cac972167b0c47d3f38b93fd896873c196c2232813fe91e312eac924478baf2125efdf600819b2177e60c84ee463d61467e87e986884dc8fb2a8978d80a118bdab2c17dd4fa43402149c069cae41b1f1561a95edae328924122b40d6644f4fb2d1d8b0cc39c201b9109e92606c5123e087c9d49bef91ffae48cafd1f18a28c1f03821aeb7b7323ea5d442aacd12a4264a2d4bbe9ddbeefc9b3b2f090f60d897b807512bfaa2f299cefc7e2b240e01771d32b323ca31c2b194f01d9b05a84463899fedf84187bf9cebc47e3ae66ff0f8370423d29a70259e5e945d1c83e1680f9a6eceeb32a1b53e1f58eb2ea734b2386eb0a04b4d1fa547744cedf996232e359535e792ea9a7d13221b92f4f66723e86b369f5f2c0cf5341db23e3d703a3b82f70988c7dc407db19974b1004a68587302c8c26b0f0b8c72df27b7d0fcfc87ae07a2da2df7295c60cbad6668e8b7d292735de75f5a72119912c2949cc35974cce38c8cec2be72263768c2bd63931718faf5f444b70f10a1d5a72a3f0de61e43546043a0a855429613ff8877094246d7df55958bc27be1a202ad35657491f724c4f1498f2f4efcd328a27348e2511b431bfe2c907833e6119dcc32be6ad20bcb6bcfc0386010f28f77df3d995cf36be94a67e7053a1050b695a59fea1429f5bda8ba6038373d81905ad2374001ed3e10e0885df9accb4a198bc58df36aca167b48b2947a908f0d63a4a708c7c04af8dc7c9bdf8f2dbec953979af7b522ecc39ccb5d807ba3bec98f9dcc89ea9885063e8bc6585998ba573f196a34f0cdd72622e7cac1af7e5d59e094f6490a83a75fb35976760b10cc438f8412f2a112107eb453bda1ce13f3f0b7f4f101ff050d2cb016d334b958d3905be0e2c15065492231f704ef42483edac5645cc0b13810467f692361cc22ab3cdedc093d31d258cc870607ba6b0482fb6d62cb76aff3c6aea3d203b653e88adf97273d61c810f543e349bd21a0de24f4aef8da4a359f323c5ea32abc05ec5335946c18021090c832dc5cb20f8f8afcdc72c280ad444b03d9c03cbb3e7c5a607d664a05e61d4b541dc2d8460f76b9a155ab1d93cbe4d6f953b830445ae1985e73f4c12dbcaa26b2b670c922549121766b7b5397a9b8880fef8e962c21ec570d1d9aaa22a618af68d3ae4218bf160fd578a51b83a40e493498290d6b05f52659675e9566e0ad81d8662f4ccbb95964742accae2dcad3e333d9ae03ca3fe054c75de6bac5b05540d03100872a76fcd8d97c1cc9a4ea9c69fc9442469d8a668264bb0176550587ef2a9bb38f28ebecbc9cc8efae4eaef34e9d2f23159174d3923a61715319fc80411fefe870079af31211439e59e5af980f89b80146ecd43aabc4193965f7eaec1b365c6b6c9938ff5a4c96d63cb16a98249050b9d5aef8d75ed08268453e724f46e8493f44deb263314ba9fc958902c935fdd756a539514282a7cdf6234179dd72a33c12231240165d681eac64e2103c2205f05fddbc9e4deb995d70a573e8504e2dafd992c011df95016d45c1e7b4466381a023a03f56cff688336241d6cdcd9a1eb29b83d781814dd8ede1ff2474544228e12def97b485d60043a9ea6ce71e7b7e3b8ec0e08ddcabb257d98a698f3fe30d6a1ba91c30a578af31c5b5840c19a5d01f7c0d183d08c3dc455ff7cf6f992f4eede539f5340cb8f02c4cf2a0ffb113bd5182e0c76f98d782f256626509019d6dc006cba4b0f3d6b27d24711b3604e121cbbf06362f1c7986997d9626b9230c51b5b59ece556baa971b72ef69e33cf0f12766b1800a0d6a5a3df533cbee6615e59c2b32fb329aee00d2d129f75123be89d11103d6ea2f778756c6c06d77191fbf01df3cef182c6982fc8ac466f2b10454d24d01dd4c193ac81c2ff142b8236417fdec94d13c6c300277b75ba804ffaa81548879afa600715c3341061dcba4c6fdd6e2dfdeb919efb1ddbf0fabdeab0708a9aa504428e5fc317ba73184156f2e5afcc1aaf2dce4e9b94d020c30723ea8c6abbc345832308ae1444d495982455e4df92ce7130d63522b3aeac6d86cf161956e2ab0e35e9880d3ccca6abd74e2f4ed6b554d20a7b4603569ad1c22ba49d1ce6e5721329199cd42df36d96bb790017574024c90aca18124880fd29bbea85d980534ee8abb01f86376b9c18e6d21da20143cf836639c37cbdb910f304c2f8605de0c22ddfe54bc21af3cb6d98f50bd768b280dd80195f380b0bccebb49825f6c2a6e6875ee72690059393c3f0f2751650eb7ec0ab4aaf9cd20616e63920f1bbd5732cb47447db7e9ff0d406e614afd71d809c1daf238b84f4256927ffb4e57f30ff9f51ff50671fe6e32911fe7f0a0f7588766ee82047f59b2211b29e4539cce249f81ccc261f6470f0ee9b086e5c058ea5beb8b2838c8be53962417272c6400e98cf468944b3c401d2a1f3b2cbf1a52c35db265793498c47da72751dbe051207c3c45dafd4376c80ef416ab62ad574bda177351e81a38ff1884cad5856d6010f1712a8999608dd6848fdf3234ede73b7d4f3a1287740214b0795ac14f80ef2ba304f457df3b2f3a223df61831d98d560c99b0e3c1d50729562047ecde70827925815e2cf47b1c8d0e56e387de45e40511b93ccdd18909847348a32f7bf01878cbb037e6081f0537b2542d4cd9b7f4b7d89a3dfdd2328e9abb290491821fc4ce92ebd0ac0a69b01f0602c419990afd69d24cd91d4c6e997e8932a993d0fc4583345a54a2f7bccc9b89a373d35d487b9aaac970ce3902746e0e5ab6eeb0216724e1640b919b9984fc0f59a3efbbee1a3ae3c95bbd8283fd1a0f1cd5ede633b7c3fd1391db5b6566147bbf2b4cc0fa4b5df2272f12bfd70cc3ca1b2498da0b6402f80e7fb592630b8d3c61ee5d2ad3bb694dd88427ecfb9bb8c14b583c23967355563e2298ab0847ceef2b36dfa4346e5a70e025ac1c3f6088d73e60b06213a7fbbd3ddc528d8f27d6602f9c0f8cdfe5f68b72120ade85afa49ce0e292203bedf94a0033f7dfd9ec704e44c7105146103cb5b3f6ab824fead0c8c194796c6fbdd2c40b682c429e543dc761f293f24f964fe690c3e241fdfa70dbd4ce1dabe86717c84ab2b78fb56ee2b7c561a8cb2251543b2055094df179ecfce81715e278f5d2dd7600b54be0fc737b4eb92829ada34f2ea33efdca53d8d75291d9af2e13e12a24e8e950c404726b4c903ccdde873b004b53f213efcacf183596d91fa06dc86ffd73e3f184a62e1bd2a3cbab7eaa645e6ee39997ee5b215f23607905798ed494e642412863293ba8e2d"}, {@device_b, @device_b, 0x89, "39bcd43dcc566167d02bff564da86b6bb22ef92f77f7cfdd9c35dcfce140627105b2b05117cfcf0d767b5fbab6b6c5c24346c13178017676b387412cb6bd1eeacf9990606913061c341ba1bc5e6a17a0d1ecee9c652f9b5ca7c84ef39f149b7ba5e1f5ed10474c8bbc144cdc86d5e7b08c7bf5cac638ffd88d1051884408939e23b5ae4d0000000000"}]}, 0x12a0) (rerun: 64) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f00000000c0)=@ctrl_frame=@cts={{}, {0x3}, @broadcast}, 0xa) 06:28:52 executing program 4: syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x2, 0x130001) getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0) setuid(r0) syz_clone(0x1c10a000, &(0x7f0000000080)="754c99df09b3a48122a9de6ef3c945d12bc732380b973028de0b2ac78a2ba15fc35377771c2618076c264709e7b45498cbf6513d281a85ce5477e438624889e9ee0f3bb3f59dc9dbcbff93dfd0064bd6fb84e77ae33c11bcc11cb5e651", 0x5d, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="84ecc66bf34c4cf359861cb848cc919427891740ffc518faefddfb27a9ed9cb2a5f8a7c1dba44895be6bf56283c283c770741f451ba8a8bac6c170a4e3a5e07ba0d412505e33ef5856524d6c0d8b1553b19b28aee3790a6155932a3d3719ca2020a2078919861194") 06:28:52 executing program 2: r0 = syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x2, 0x130001) getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0) setuid(r2) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000040)={0x8, 0x10000, {r0}, {r2}, 0x8, 0x100}) syz_clone(0x1c10a000, &(0x7f0000000080)="754c99df09b3a48122a9de6ef3c945d12bc732380b973028de0b2ac78a2ba15fc35377771c2618076c264709e7b45498cbf6513d281a85ce5477e438624889e9ee0f3bb3f59dc9dbcbff93dfd0064bd6fb84e77ae33c11bcc11cb5e651", 0x5d, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="84ecc66bf34c4cf359861cb848cc919427891740ffc518faefddfb27a9ed9cb2a5f8a7c1dba44895be6bf56283c283c770741f451ba8a8bac6c170a4e3a5e07ba0d412505e33ef5856524d6c0d8b1553b19b28aee3790a6155932a3d3719ca2020a2078919861194") [ 1111.698303][ T8412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.701429][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.706388][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.709533][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.712395][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.721304][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.726935][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.730255][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.733586][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.736727][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.740448][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.744060][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.747564][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.751514][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:52 executing program 4: syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x2, 0x130001) getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) syz_clone(0x1c10a000, &(0x7f0000000080)="754c99df09b3a48122a9de6ef3c945d12bc732380b973028de0b2ac78a2ba15fc35377771c2618076c264709e7b45498cbf6513d281a85ce5477e438624889e9ee0f3bb3f59dc9dbcbff93dfd0064bd6fb84e77ae33c11bcc11cb5e651", 0x5d, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="84ecc66bf34c4cf359861cb848cc919427891740ffc518faefddfb27a9ed9cb2a5f8a7c1dba44895be6bf56283c283c770741f451ba8a8bac6c170a4e3a5e07ba0d412505e33ef5856524d6c0d8b1553b19b28aee3790a6155932a3d3719ca2020a2078919861194") [ 1111.759153][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.764815][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.771096][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.776955][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.781667][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.791615][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.811493][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:52 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x0) (async) 06:28:52 executing program 2: r0 = syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x2, 0x130001) getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0) setuid(r2) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000040)={0x8, 0x10000, {r0}, {r2}, 0x8, 0x100}) syz_clone(0x1c10a000, &(0x7f0000000080)="754c99df09b3a48122a9de6ef3c945d12bc732380b973028de0b2ac78a2ba15fc35377771c2618076c264709e7b45498cbf6513d281a85ce5477e438624889e9ee0f3bb3f59dc9dbcbff93dfd0064bd6fb84e77ae33c11bcc11cb5e651", 0x5d, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="84ecc66bf34c4cf359861cb848cc919427891740ffc518faefddfb27a9ed9cb2a5f8a7c1dba44895be6bf56283c283c770741f451ba8a8bac6c170a4e3a5e07ba0d412505e33ef5856524d6c0d8b1553b19b28aee3790a6155932a3d3719ca2020a2078919861194") [ 1111.831052][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.839622][ T8425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.843489][ T8425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.846196][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.851141][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.855182][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.863663][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.867649][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.871100][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:52 executing program 4: syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x2, 0x130001) syz_clone(0x1c10a000, &(0x7f0000000080)="754c99df09b3a48122a9de6ef3c945d12bc732380b973028de0b2ac78a2ba15fc35377771c2618076c264709e7b45498cbf6513d281a85ce5477e438624889e9ee0f3bb3f59dc9dbcbff93dfd0064bd6fb84e77ae33c11bcc11cb5e651", 0x5d, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="84ecc66bf34c4cf359861cb848cc919427891740ffc518faefddfb27a9ed9cb2a5f8a7c1dba44895be6bf56283c283c770741f451ba8a8bac6c170a4e3a5e07ba0d412505e33ef5856524d6c0d8b1553b19b28aee3790a6155932a3d3719ca2020a2078919861194") [ 1111.879153][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.882233][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.892130][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.897697][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.901373][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:52 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) 06:28:52 executing program 1: syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0xfffffffffffffe0d) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x20000) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000080)={0x3, 0x0, 0x2, 0x8, 0x0, 0x8, 0xec4}) [ 1111.945800][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.949011][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.965509][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.969820][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.983718][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:52 executing program 5: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) [ 1111.991509][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.995396][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1112.013667][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1112.019386][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:52 executing program 2: syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x2, 0x130001) getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) syz_clone(0x1c10a000, &(0x7f0000000080)="754c99df09b3a48122a9de6ef3c945d12bc732380b973028de0b2ac78a2ba15fc35377771c2618076c264709e7b45498cbf6513d281a85ce5477e438624889e9ee0f3bb3f59dc9dbcbff93dfd0064bd6fb84e77ae33c11bcc11cb5e651", 0x5d, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="84ecc66bf34c4cf359861cb848cc919427891740ffc518faefddfb27a9ed9cb2a5f8a7c1dba44895be6bf56283c283c770741f451ba8a8bac6c170a4e3a5e07ba0d412505e33ef5856524d6c0d8b1553b19b28aee3790a6155932a3d3719ca2020a2078919861194") [ 1112.024132][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:52 executing program 4: syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x1c10a000, &(0x7f0000000080)="754c99df09b3a48122a9de6ef3c945d12bc732380b973028de0b2ac78a2ba15fc35377771c2618076c264709e7b45498cbf6513d281a85ce5477e438624889e9ee0f3bb3f59dc9dbcbff93dfd0064bd6fb84e77ae33c11bcc11cb5e651", 0x5d, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="84ecc66bf34c4cf359861cb848cc919427891740ffc518faefddfb27a9ed9cb2a5f8a7c1dba44895be6bf56283c283c770741f451ba8a8bac6c170a4e3a5e07ba0d412505e33ef5856524d6c0d8b1553b19b28aee3790a6155932a3d3719ca2020a2078919861194") [ 1112.035388][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1112.038610][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1112.054272][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1112.057448][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1112.060495][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1112.070189][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1112.078649][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1112.087032][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1112.100711][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1112.107720][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1112.121650][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1112.131307][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1112.151296][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1112.183823][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1112.187085][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1112.190232][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1112.194631][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1112.197833][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1112.201010][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1112.206089][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1112.209155][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1112.212204][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1112.215817][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:53 executing program 0: syz_80211_inject_frame(&(0x7f0000000040), 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000001380)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x5}, @initial, @device_b, @broadcast, {0x5, 0x2}}, @a_msdu=[{@broadcast, @broadcast, 0x3b, "81977c295057e0f938fae7193a2f8b53e0169cf3770ba322df41207c23a2f0629dd0164f26e70b3fae9957944186f87a4d922d9b94586f5f8060c9"}, {@broadcast, @device_b, 0x5a, "02107826e3345e928f64553cc2a10374cd672e676234fd92b2922ad919b8b62397035c95e85de2b77054524d6f55b382b6c66fa833cae0bd2c2107d23e5544d3d5984c44599a1ba4e27041230a85875239f241785d258e45ba7c"}, {@broadcast, @device_b, 0x86, "dc3750e6be9b5ba231cfb4fb4ce69b12c53d621e8d0182e51e3ff661d9ee85786b3a9267255a90df8457fc8b563b3beb251258435e7c578620c3964625ebcd707f82c4f7b1e7d5ffbccc178b2c9fcfc3b107e2fb3e1905b5b601d55d2b288e3a9e11a5aa04e2125bfc789fc928896738e5d24b396cf070b11c6955d80d97ff00b2c6f2e85510"}, {@broadcast, @broadcast, 0x87, "391ad679b6458697b4ef8ae49203ee5c593f7f4f72de46b9e4b60185b9f8378aefacf4cad36580a4f737858ae8d32ea774a79592f44bd9d41ececaf6d7c8356489d406dbdf0fe98416c3b9ab7edad88955d5d087a50b1f11476a8077213cd5213d6e0c23cab5203bfc400157568ea93d832f1c70b3f583bd9a37da1f7485e52d6cb3c536c1b39f"}, {@device_b, @broadcast, 0x1000, "17c63210e044243a8f1173b3b6e341e132ab6ad8d000d1edf6547b367a04332c19bc603e9f639642d089198209d03ca1dfb8e04daff3db275f3643e056c4a70a53d06558574e6867f96e3d81c5308561bea50d967561e54b5f5f18f6b4a748f9e3be12a78c0447d4092567d97ce6db26bd29105dfcaaff98808f5b5505c6b87fc4377b5886a5c5fad661a2abde891502deca37e07744d01af3cf2c65ba9be3220409f8276bba752f4c6be1a9f54f177fc3e2ba47e1a332e8730ae7cd4b2a72ecd519e9b2882bc46978af2638abfdcff95a18326dcbdcce4bd53738bba59fdadff78205c6f25ee36726da2e471e319f93e6bae3e5002533903e1a23eb1fcf356cd106b0bf462469e8cec510346466dc25446c19807f35f8a6f055801ce780c3fe0e54b23d162544a4c28ea1c08f1520d70f8afe844924eae87cc3ca92e02e5e825b5c5535ee0679b85eb01c027cb166d9d907cbb23ef2612ea55b8ccb834715a3a1b506e685fbd95185f2c73d504487cc50df4969e2c8f06de76168c655d36cfcea54703548ca1b7e1b45870c3ddbc6754cdbc2a7f756697702b85de1c4e33ecc03b3286208067f6f2c98793147cdf6e09aa3d221b1d3f25b0297a44d9a650034e918bbc7dfe1a4e5af65f33ddd0ca60c11d3a122cd5fa57baeff47da2836e261fc48748cad4a2c412a1bf11d72a62593d82f0df572e628b7cca77f257ea4bc87661562588d95b728dc17ee42b9e9c50d35076b39934dff48f7b74a27f81e125a001cf56e5550bd9db11067c78667f7e53ae475f0ab23490e5ae3c99e01916c7665b8c881b365959ddeff8165c9ba4dd2074189c1e8b33d3b6cfe2c25fbeb857d9f0b17acf7622df040180f42aec429484f0b8dd7e656e8cfa6012942428370a189b11ee9cc780ac0f600e4719692754cb4caa21f2924f17ab45e26ddd0e5e51a45b1331af660bd62e5403923114945fd71104a9ec4ee51dfcf448f2dd990c6da9fad4a5f26f8a7fb806a712133758cbe5ef975b772de7a25740abbf904968b6a438d2c27c792597bdd51aa26633d38c12c3429ecd07d651f105681abb856c9299cd15678afe8167423ae50757496237f6a215d43fcbf7e2a33c4e5396c2cd69a261eb9f46558b678f71df0f525c7186c72338ac04b249c92d5eacc0c676047ef6740aa684f8f8b70e9882ae8cfa0245331499ec8a6e7f6d4b801eaa034fe261fd9b700d0e6519b0c007d32908cd811c9e9b88c97e1ef081e46c034f6c371c2389c0248a4fd2bfbab5d47c1b858625b802b8735670eb7618684c192c5a0f514d1a809009026a2dd502bd161a28e37bebe211164710d578f63be710bbc6b27ede6b277f7cf999d3fd7d19782e071605c17b9e9162c2716668f5de931c6f5a0727612ce2ebe818d5d956afc17f8d4cb0bd7460634237e30095b333b326f09a2093c74549731f250ed91b88a88c979af3663cc6ff3084ba143190cc8fceadb74ca0c9825e93c25a0a42e8f2601c2461239e86dc84186530ad365773ff8182c082814b5e6bf370b7865c6aec6083eb38cf41f1e74351d4e7847581769aea88c8c288b6993a22b5e5e0fd2eca743a48af90c5c2645f1931de69a93c44ba42baf9e3211e6df27e1e89e8dba2ead88bb5dba56fd1c12f2f3c8473a568e27e5c349c4d9c138f409e8cda3553f8605275c7feec81b1232cbe94364de4a4e57f65d8d14b45eca39be5bd43b48cf7ccdb4b980946f3cf2404ede26816de5d8fad9c463e201e6c8d7d2e2a531d65d8f425bc7586aed2641b4ed57e3730812f490dae8ddb9e551897a212a843c93ef9b6c5e43b94f9f7b4cbef25b1f442fbdd647b861594089d61116ce1901f39dc4837dea3060673228050ddc5b1b9fc619394a200659d17d7d759af00818ac85b0b622655b5665c95449ded290b57097751d2f72c1947cb591f075ece50665ed6a0668df223eaf0b92acc6d69eeadd884397d1e1b0d16194327bdf3956ecd45e92b0b441c9f2c70aa444709f7306843162a4fabaef1ca5aabe3dc77a428353b724dfb80fb5646e180a0bd7bdb0d0c4780d4170a65b5ba60da2d31202b13bdf70dec781e883359edd9e1756d1a04bdc598e90b1c4772b42cc0c3f3be44b09212ccb2c9ab33127bf632d6efd3fe09906b75b1e2207fbbd6c3b9630414514fac0c333e35533691f9b780763edeb2e81149f5160a729c96ba63552f2448e8bf95e1c015458272ac2b55743bf2743f52f6782fbadb444dfd0d2de45f634cc5ee8783430165043f4d165a9c483a9bd6e392208b9ebe9926ffe60a13da9e00fc5e0a2025000a5f8eb70cbe08200e37d38864a7ef9330253bb9709bca3b79502fc3f8f0b1869999427c30a4902fbbc658d60bf39d6d1a9cd6dd11bdcc08b04a8abeb6b4be028ad396e7c10c4c93373e5c9bacaabcf8e8d619b418cf9819dad021b0ee09664b484153055670233e8c5a62098d572342a6cac972167b0c47d3f38b93fd896873c196c2232813fe91e312eac924478baf2125efdf600819b2177e60c84ee463d61467e87e986884dc8fb2a8978d80a118bdab2c17dd4fa43402149c069cae41b1f1561a95edae328924122b40d6644f4fb2d1d8b0cc39c201b9109e92606c5123e087c9d49bef91ffae48cafd1f18a28c1f03821aeb7b7323ea5d442aacd12a4264a2d4bbe9ddbeefc9b3b2f090f60d897b807512bfaa2f299cefc7e2b240e01771d32b323ca31c2b194f01d9b05a84463899fedf84187bf9cebc47e3ae66ff0f8370423d29a70259e5e945d1c83e1680f9a6eceeb32a1b53e1f58eb2ea734b2386eb0a04b4d1fa547744cedf996232e359535e792ea9a7d13221b92f4f66723e86b369f5f2c0cf5341db23e3d703a3b82f70988c7dc407db19974b1004a68587302c8c26b0f0b8c72df27b7d0fcfc87ae07a2da2df7295c60cbad6668e8b7d292735de75f5a72119912c2949cc35974cce38c8cec2be72263768c2bd63931718faf5f444b70f10a1d5a72a3f0de61e43546043a0a855429613ff8877094246d7df55958bc27be1a202ad35657491f724c4f1498f2f4efcd328a27348e2511b431bfe2c907833e6119dcc32be6ad20bcb6bcfc0386010f28f77df3d995cf36be94a67e7053a1050b695a59fea1429f5bda8ba6038373d81905ad2374001ed3e10e0885df9accb4a198bc58df36aca167b48b2947a908f0d63a4a708c7c04af8dc7c9bdf8f2dbec953979af7b522ecc39ccb5d807ba3bec98f9dcc89ea9885063e8bc6585998ba573f196a34f0cdd72622e7cac1af7e5d59e094f6490a83a75fb35976760b10cc438f8412f2a112107eb453bda1ce13f3f0b7f4f101ff050d2cb016d334b958d3905be0e2c15065492231f704ef42483edac5645cc0b13810467f692361cc22ab3cdedc093d31d258cc870607ba6b0482fb6d62cb76aff3c6aea3d203b653e88adf97273d61c810f543e349bd21a0de24f4aef8da4a359f323c5ea32abc05ec5335946c18021090c832dc5cb20f8f8afcdc72c280ad444b03d9c03cbb3e7c5a607d664a05e61d4b541dc2d8460f76b9a155ab1d93cbe4d6f953b830445ae1985e73f4c12dbcaa26b2b670c922549121766b7b5397a9b8880fef8e962c21ec570d1d9aaa22a618af68d3ae4218bf160fd578a51b83a40e493498290d6b05f52659675e9566e0ad81d8662f4ccbb95964742accae2dcad3e333d9ae03ca3fe054c75de6bac5b05540d03100872a76fcd8d97c1cc9a4ea9c69fc9442469d8a668264bb0176550587ef2a9bb38f28ebecbc9cc8efae4eaef34e9d2f23159174d3923a61715319fc80411fefe870079af31211439e59e5af980f89b80146ecd43aabc4193965f7eaec1b365c6b6c9938ff5a4c96d63cb16a98249050b9d5aef8d75ed08268453e724f46e8493f44deb263314ba9fc958902c935fdd756a539514282a7cdf6234179dd72a33c12231240165d681eac64e2103c2205f05fddbc9e4deb995d70a573e8504e2dafd992c011df95016d45c1e7b4466381a023a03f56cff688336241d6cdcd9a1eb29b83d781814dd8ede1ff2474544228e12def97b485d60043a9ea6ce71e7b7e3b8ec0e08ddcabb257d98a698f3fe30d6a1ba91c30a578af31c5b5840c19a5d01f7c0d183d08c3dc455ff7cf6f992f4eede539f5340cb8f02c4cf2a0ffb113bd5182e0c76f98d782f256626509019d6dc006cba4b0f3d6b27d24711b3604e121cbbf06362f1c7986997d9626b9230c51b5b59ece556baa971b72ef69e33cf0f12766b1800a0d6a5a3df533cbee6615e59c2b32fb329aee00d2d129f75123be89d11103d6ea2f778756c6c06d77191fbf01df3cef182c6982fc8ac466f2b10454d24d01dd4c193ac81c2ff142b8236417fdec94d13c6c300277b75ba804ffaa81548879afa600715c3341061dcba4c6fdd6e2dfdeb919efb1ddbf0fabdeab0708a9aa504428e5fc317ba73184156f2e5afcc1aaf2dce4e9b94d020c30723ea8c6abbc345832308ae1444d495982455e4df92ce7130d63522b3aeac6d86cf161956e2ab0e35e9880d3ccca6abd74e2f4ed6b554d20a7b4603569ad1c22ba49d1ce6e5721329199cd42df36d96bb790017574024c90aca18124880fd29bbea85d980534ee8abb01f86376b9c18e6d21da20143cf836639c37cbdb910f304c2f8605de0c22ddfe54bc21af3cb6d98f50bd768b280dd80195f380b0bccebb49825f6c2a6e6875ee72690059393c3f0f2751650eb7ec0ab4aaf9cd20616e63920f1bbd5732cb47447db7e9ff0d406e614afd71d809c1daf238b84f4256927ffb4e57f30ff9f51ff50671fe6e32911fe7f0a0f7588766ee82047f59b2211b29e4539cce249f81ccc261f6470f0ee9b086e5c058ea5beb8b2838c8be53962417272c6400e98cf468944b3c401d2a1f3b2cbf1a52c35db265793498c47da72751dbe051207c3c45dafd4376c80ef416ab62ad574bda177351e81a38ff1884cad5856d6010f1712a8999608dd6848fdf3234ede73b7d4f3a1287740214b0795ac14f80ef2ba304f457df3b2f3a223df61831d98d560c99b0e3c1d50729562047ecde70827925815e2cf47b1c8d0e56e387de45e40511b93ccdd18909847348a32f7bf01878cbb037e6081f0537b2542d4cd9b7f4b7d89a3dfdd2328e9abb290491821fc4ce92ebd0ac0a69b01f0602c419990afd69d24cd91d4c6e997e8932a993d0fc4583345a54a2f7bccc9b89a373d35d487b9aaac970ce3902746e0e5ab6eeb0216724e1640b919b9984fc0f59a3efbbee1a3ae3c95bbd8283fd1a0f1cd5ede633b7c3fd1391db5b6566147bbf2b4cc0fa4b5df2272f12bfd70cc3ca1b2498da0b6402f80e7fb592630b8d3c61ee5d2ad3bb694dd88427ecfb9bb8c14b583c23967355563e2298ab0847ceef2b36dfa4346e5a70e025ac1c3f6088d73e60b06213a7fbbd3ddc528d8f27d6602f9c0f8cdfe5f68b72120ade85afa49ce0e292203bedf94a0033f7dfd9ec704e44c7105146103cb5b3f6ab824fead0c8c194796c6fbdd2c40b682c429e543dc761f293f24f964fe690c3e241fdfa70dbd4ce1dabe86717c84ab2b78fb56ee2b7c561a8cb2251543b2055094df179ecfce81715e278f5d2dd7600b54be0fc737b4eb92829ada34f2ea33efdca53d8d75291d9af2e13e12a24e8e950c404726b4c903ccdde873b004b53f213efcacf183596d91fa06dc86ffd73e3f184a62e1bd2a3cbab7eaa645e6ee39997ee5b215f23607905798ed494e642412863293ba8e2d"}, {@device_b, @device_b, 0x89, "39bcd43dcc566167d02bff564da86b6bb22ef92f77f7cfdd9c35dcfce140627105b2b05117cfcf0d767b5fbab6b6c5c24346c13178017676b387412cb6bd1eeacf9990606913061c341ba1bc5e6a17a0d1ecee9c652f9b5ca7c84ef39f149b7ba5e1f5ed10474c8bbc144cdc86d5e7b08c7bf5cac638ffd88d1051884408939e23b5ae4d0000000000"}]}, 0x12a0) (async) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f00000000c0)=@ctrl_frame=@cts={{}, {0x3}, @broadcast}, 0xa) 06:28:53 executing program 5: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) 06:28:53 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x0) 06:28:53 executing program 2: syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x2, 0x130001) getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) syz_clone(0x1c10a000, &(0x7f0000000080)="754c99df09b3a48122a9de6ef3c945d12bc732380b973028de0b2ac78a2ba15fc35377771c2618076c264709e7b45498cbf6513d281a85ce5477e438624889e9ee0f3bb3f59dc9dbcbff93dfd0064bd6fb84e77ae33c11bcc11cb5e651", 0x5d, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="84ecc66bf34c4cf359861cb848cc919427891740ffc518faefddfb27a9ed9cb2a5f8a7c1dba44895be6bf56283c283c770741f451ba8a8bac6c170a4e3a5e07ba0d412505e33ef5856524d6c0d8b1553b19b28aee3790a6155932a3d3719ca2020a2078919861194") 06:28:53 executing program 4: syz_clone(0x1c10a000, &(0x7f0000000080)="754c99df09b3a48122a9de6ef3c945d12bc732380b973028de0b2ac78a2ba15fc35377771c2618076c264709e7b45498cbf6513d281a85ce5477e438624889e9ee0f3bb3f59dc9dbcbff93dfd0064bd6fb84e77ae33c11bcc11cb5e651", 0x5d, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="84ecc66bf34c4cf359861cb848cc919427891740ffc518faefddfb27a9ed9cb2a5f8a7c1dba44895be6bf56283c283c770741f451ba8a8bac6c170a4e3a5e07ba0d412505e33ef5856524d6c0d8b1553b19b28aee3790a6155932a3d3719ca2020a2078919861194") 06:28:53 executing program 1: syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0xfffffffffffffe0d) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000080)={0x3, 0x0, 0x2, 0x8, 0x0, 0x8, 0xec4}) [ 1112.552304][ T8458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1112.574780][ T8467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1112.585085][ T8465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:53 executing program 4: syz_clone(0x0, &(0x7f0000000080)="754c99df09b3a48122a9de6ef3c945d12bc732380b973028de0b2ac78a2ba15fc35377771c2618076c264709e7b45498cbf6513d281a85ce5477e438624889e9ee0f3bb3f59dc9dbcbff93dfd0064bd6fb84e77ae33c11bcc11cb5e651", 0x5d, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="84ecc66bf34c4cf359861cb848cc919427891740ffc518faefddfb27a9ed9cb2a5f8a7c1dba44895be6bf56283c283c770741f451ba8a8bac6c170a4e3a5e07ba0d412505e33ef5856524d6c0d8b1553b19b28aee3790a6155932a3d3719ca2020a2078919861194") 06:28:53 executing program 5: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) 06:28:53 executing program 2: syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x2, 0x130001) getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) syz_clone(0x1c10a000, &(0x7f0000000080)="754c99df09b3a48122a9de6ef3c945d12bc732380b973028de0b2ac78a2ba15fc35377771c2618076c264709e7b45498cbf6513d281a85ce5477e438624889e9ee0f3bb3f59dc9dbcbff93dfd0064bd6fb84e77ae33c11bcc11cb5e651", 0x5d, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="84ecc66bf34c4cf359861cb848cc919427891740ffc518faefddfb27a9ed9cb2a5f8a7c1dba44895be6bf56283c283c770741f451ba8a8bac6c170a4e3a5e07ba0d412505e33ef5856524d6c0d8b1553b19b28aee3790a6155932a3d3719ca2020a2078919861194") 06:28:53 executing program 4: syz_clone(0x0, &(0x7f0000000080)="754c99df09b3a48122a9de6ef3c945d12bc732380b973028de0b2ac78a2ba15fc35377771c2618076c264709e7b45498cbf6513d281a85ce5477e438624889e9ee0f3bb3f59dc9dbcbff93dfd0064bd6fb84e77ae33c11bcc11cb5e651", 0x5d, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="84ecc66bf34c4cf359861cb848cc919427891740ffc518faefddfb27a9ed9cb2a5f8a7c1dba44895be6bf56283c283c770741f451ba8a8bac6c170a4e3a5e07ba0d412505e33ef5856524d6c0d8b1553b19b28aee3790a6155932a3d3719ca2020a2078919861194") 06:28:53 executing program 2: syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x2, 0x130001) syz_clone(0x1c10a000, &(0x7f0000000080)="754c99df09b3a48122a9de6ef3c945d12bc732380b973028de0b2ac78a2ba15fc35377771c2618076c264709e7b45498cbf6513d281a85ce5477e438624889e9ee0f3bb3f59dc9dbcbff93dfd0064bd6fb84e77ae33c11bcc11cb5e651", 0x5d, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="84ecc66bf34c4cf359861cb848cc919427891740ffc518faefddfb27a9ed9cb2a5f8a7c1dba44895be6bf56283c283c770741f451ba8a8bac6c170a4e3a5e07ba0d412505e33ef5856524d6c0d8b1553b19b28aee3790a6155932a3d3719ca2020a2078919861194") 06:28:53 executing program 4: syz_clone(0x0, &(0x7f0000000080)="754c99df09b3a48122a9de6ef3c945d12bc732380b973028de0b2ac78a2ba15fc35377771c2618076c264709e7b45498cbf6513d281a85ce5477e438624889e9ee0f3bb3f59dc9dbcbff93dfd0064bd6fb84e77ae33c11bcc11cb5e651", 0x5d, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="84ecc66bf34c4cf359861cb848cc919427891740ffc518faefddfb27a9ed9cb2a5f8a7c1dba44895be6bf56283c283c770741f451ba8a8bac6c170a4e3a5e07ba0d412505e33ef5856524d6c0d8b1553b19b28aee3790a6155932a3d3719ca2020a2078919861194") 06:28:53 executing program 4: syz_clone(0x1c10a000, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="84ecc66bf34c4cf359861cb848cc919427891740ffc518faefddfb27a9ed9cb2a5f8a7c1dba44895be6bf56283c283c770741f451ba8a8bac6c170a4e3a5e07ba0d412505e33ef5856524d6c0d8b1553b19b28aee3790a6155932a3d3719ca2020a2078919861194") 06:28:53 executing program 5: socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) 06:28:53 executing program 2: syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x1c10a000, &(0x7f0000000080)="754c99df09b3a48122a9de6ef3c945d12bc732380b973028de0b2ac78a2ba15fc35377771c2618076c264709e7b45498cbf6513d281a85ce5477e438624889e9ee0f3bb3f59dc9dbcbff93dfd0064bd6fb84e77ae33c11bcc11cb5e651", 0x5d, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="84ecc66bf34c4cf359861cb848cc919427891740ffc518faefddfb27a9ed9cb2a5f8a7c1dba44895be6bf56283c283c770741f451ba8a8bac6c170a4e3a5e07ba0d412505e33ef5856524d6c0d8b1553b19b28aee3790a6155932a3d3719ca2020a2078919861194") 06:28:53 executing program 1: syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0xfffffffffffffe0d) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000080)={0x3, 0x0, 0x2, 0x8, 0x0, 0x8, 0xec4}) 06:28:53 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) io_uring_setup(0x3c3e, &(0x7f0000000040)={0x0, 0xd153, 0x20, 0x2, 0x334}) 06:28:53 executing program 0: syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x0) [ 1112.937451][ T8498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1112.955423][ T8502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:53 executing program 5: socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) 06:28:53 executing program 4: syz_clone(0x1c10a000, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)="84ecc66bf34c4cf359861cb848cc919427891740ffc518faefddfb27a9ed9cb2a5f8a7c1dba44895be6bf56283c283c770741f451ba8a8bac6c170a4e3a5e07ba0d412505e33ef5856524d6c0d8b1553b19b28aee3790a6155932a3d3719ca2020a2078919861194") 06:28:53 executing program 5: socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) 06:28:53 executing program 4: syz_clone(0x1c10a000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)="84ecc66bf34c4cf359861cb848cc919427891740ffc518faefddfb27a9ed9cb2a5f8a7c1dba44895be6bf56283c283c770741f451ba8a8bac6c170a4e3a5e07ba0d412505e33ef5856524d6c0d8b1553b19b28aee3790a6155932a3d3719ca2020a2078919861194") 06:28:53 executing program 2: syz_clone(0x1c10a000, &(0x7f0000000080)="754c99df09b3a48122a9de6ef3c945d12bc732380b973028de0b2ac78a2ba15fc35377771c2618076c264709e7b45498cbf6513d281a85ce5477e438624889e9ee0f3bb3f59dc9dbcbff93dfd0064bd6fb84e77ae33c11bcc11cb5e651", 0x5d, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="84ecc66bf34c4cf359861cb848cc919427891740ffc518faefddfb27a9ed9cb2a5f8a7c1dba44895be6bf56283c283c770741f451ba8a8bac6c170a4e3a5e07ba0d412505e33ef5856524d6c0d8b1553b19b28aee3790a6155932a3d3719ca2020a2078919861194") 06:28:53 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 06:28:53 executing program 4: syz_clone(0x1c10a000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)="84ecc66bf34c4cf359861cb848cc919427891740ffc518faefddfb27a9ed9cb2a5f8a7c1dba44895be6bf56283c283c770741f451ba8a8bac6c170a4e3a5e07ba0d412505e33ef5856524d6c0d8b1553b19b28aee3790a6155932a3d3719ca2020a2078919861194") 06:28:53 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 06:28:53 executing program 2: syz_clone(0x0, &(0x7f0000000080)="754c99df09b3a48122a9de6ef3c945d12bc732380b973028de0b2ac78a2ba15fc35377771c2618076c264709e7b45498cbf6513d281a85ce5477e438624889e9ee0f3bb3f59dc9dbcbff93dfd0064bd6fb84e77ae33c11bcc11cb5e651", 0x5d, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="84ecc66bf34c4cf359861cb848cc919427891740ffc518faefddfb27a9ed9cb2a5f8a7c1dba44895be6bf56283c283c770741f451ba8a8bac6c170a4e3a5e07ba0d412505e33ef5856524d6c0d8b1553b19b28aee3790a6155932a3d3719ca2020a2078919861194") 06:28:53 executing program 1: syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0xfffffffffffffe0d) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000080)={0x3, 0x0, 0x2, 0x8, 0x0, 0x8, 0xec4}) 06:28:53 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) io_uring_setup(0x3c3e, &(0x7f0000000040)={0x0, 0xd153, 0x20, 0x2, 0x334}) [ 1113.267126][ T8534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:53 executing program 0: syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x0) 06:28:53 executing program 4: syz_clone(0x1c10a000, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:53 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 06:28:53 executing program 2: syz_clone(0x0, &(0x7f0000000080)="754c99df09b3a48122a9de6ef3c945d12bc732380b973028de0b2ac78a2ba15fc35377771c2618076c264709e7b45498cbf6513d281a85ce5477e438624889e9ee0f3bb3f59dc9dbcbff93dfd0064bd6fb84e77ae33c11bcc11cb5e651", 0x5d, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="84ecc66bf34c4cf359861cb848cc919427891740ffc518faefddfb27a9ed9cb2a5f8a7c1dba44895be6bf56283c283c770741f451ba8a8bac6c170a4e3a5e07ba0d412505e33ef5856524d6c0d8b1553b19b28aee3790a6155932a3d3719ca2020a2078919861194") 06:28:53 executing program 5: syz_clone(0x1c10a000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)="84ecc66bf34c4cf359861cb848cc919427891740ffc518faefddfb27a9ed9cb2a5f8a7c1dba44895be6bf56283c283c770741f451ba8a8bac6c170a4e3a5e07ba0d412505e33ef5856524d6c0d8b1553b19b28aee3790a6155932a3d3719ca2020a2078919861194") [ 1113.322466][ T8544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:53 executing program 2: syz_clone(0x0, &(0x7f0000000080)="754c99df09b3a48122a9de6ef3c945d12bc732380b973028de0b2ac78a2ba15fc35377771c2618076c264709e7b45498cbf6513d281a85ce5477e438624889e9ee0f3bb3f59dc9dbcbff93dfd0064bd6fb84e77ae33c11bcc11cb5e651", 0x5d, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="84ecc66bf34c4cf359861cb848cc919427891740ffc518faefddfb27a9ed9cb2a5f8a7c1dba44895be6bf56283c283c770741f451ba8a8bac6c170a4e3a5e07ba0d412505e33ef5856524d6c0d8b1553b19b28aee3790a6155932a3d3719ca2020a2078919861194") 06:28:53 executing program 4: syz_clone(0x1c10a000, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:53 executing program 2: syz_clone(0x1c10a000, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="84ecc66bf34c4cf359861cb848cc919427891740ffc518faefddfb27a9ed9cb2a5f8a7c1dba44895be6bf56283c283c770741f451ba8a8bac6c170a4e3a5e07ba0d412505e33ef5856524d6c0d8b1553b19b28aee3790a6155932a3d3719ca2020a2078919861194") 06:28:54 executing program 5: syz_clone(0x1c10a000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)="84ecc66bf34c4cf359861cb848cc919427891740ffc518faefddfb27a9ed9cb2a5f8a7c1dba44895be6bf56283c283c770741f451ba8a8bac6c170a4e3a5e07ba0d412505e33ef5856524d6c0d8b1553b19b28aee3790a6155932a3d3719ca2020a2078919861194") 06:28:54 executing program 4: syz_clone(0x1c10a000, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:54 executing program 1: syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0xfffffffffffffe0d) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x20000) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000080)={0x3, 0x0, 0x2, 0x8, 0x0, 0x8, 0xec4}) 06:28:54 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) io_uring_setup(0x3c3e, &(0x7f0000000040)={0x0, 0xd153, 0x20, 0x2, 0x334}) 06:28:54 executing program 0: syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x0) 06:28:54 executing program 2: syz_clone(0x1c10a000, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)="84ecc66bf34c4cf359861cb848cc919427891740ffc518faefddfb27a9ed9cb2a5f8a7c1dba44895be6bf56283c283c770741f451ba8a8bac6c170a4e3a5e07ba0d412505e33ef5856524d6c0d8b1553b19b28aee3790a6155932a3d3719ca2020a2078919861194") 06:28:54 executing program 5: syz_clone(0x1c10a000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)="84ecc66bf34c4cf359861cb848cc919427891740ffc518faefddfb27a9ed9cb2a5f8a7c1dba44895be6bf56283c283c770741f451ba8a8bac6c170a4e3a5e07ba0d412505e33ef5856524d6c0d8b1553b19b28aee3790a6155932a3d3719ca2020a2078919861194") 06:28:54 executing program 4: syz_clone(0x1c10a000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1113.647088][ T8567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:54 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1113.699582][ T8578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:54 executing program 2: syz_clone(0x1c10a000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)="84ecc66bf34c4cf359861cb848cc919427891740ffc518faefddfb27a9ed9cb2a5f8a7c1dba44895be6bf56283c283c770741f451ba8a8bac6c170a4e3a5e07ba0d412505e33ef5856524d6c0d8b1553b19b28aee3790a6155932a3d3719ca2020a2078919861194") 06:28:54 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:54 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)="84ecc66bf34c4cf359861cb848cc919427891740ffc518faefddfb27a9ed9cb2a5f8a7c1dba44895be6bf56283c283c770741f451ba8a8bac6c170a4e3a5e07ba0d412505e33ef5856524d6c0d8b1553b19b28aee3790a6155932a3d3719ca2020a2078919861194") 06:28:54 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:54 executing program 2: syz_clone(0x1c10a000, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:54 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x20000) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000080)={0x3, 0x0, 0x2, 0x8, 0x0, 0x8, 0xec4}) 06:28:54 executing program 4: syz_clone(0x1c10a000, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="84ecc66bf34c4cf359861cb848cc919427891740ffc518faefddfb27a9ed9cb2a5f8a7c1dba44895be6bf56283c283c770741f451ba8a8bac6c170a4e3a5e07ba0d412505e33ef5856524d6c0d8b1553b19b28aee3790a6155932a3d3719ca2020a2078919861194") 06:28:54 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x1, 0x20000) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000080)={0x3, 0x0, 0x2, 0x8, 0x0, 0x8, 0xec4}) 06:28:54 executing program 3: ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{@fixed}]}) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x0) 06:28:54 executing program 2: syz_clone(0x0, &(0x7f0000000080)="754c99df09b3a48122a9de6ef3c945d12bc732380b973028de0b2ac78a2ba15fc35377771c2618076c264709e7b45498cbf6513d281a85ce5477e438624889e9ee0f3bb3f59dc9dbcbff93dfd0064bd6fb84e77ae33c11bcc11cb5e651", 0x5d, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="84ecc66bf34c4cf359861cb848cc919427891740ffc518faefddfb27a9ed9cb2a5f8a7c1dba44895be6bf56283c283c770741f451ba8a8bac6c170a4e3a5e07ba0d412505e33ef5856524d6c0d8b1553b19b28aee3790a6155932a3d3719ca2020a2078919861194") 06:28:54 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r2, 0x21, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r4, 0x21, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x70, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7ff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x178000000000000}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0xc001) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="5f9aa229de970f2c03493f0adc06c14efe04a20e", @ANYRES16=0x0, @ANYBLOB="000829bd7000fbdbdf250100000008000100020000000c0006000100000001000000080001000100000008000300", @ANYRES32=r6, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4005}, 0x4000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r7, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan1\x00'}) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r8, 0x18, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xfa02022be4252baa}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x18}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:28:54 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)="84ecc66bf34c4cf359861cb848cc919427891740ffc518faefddfb27a9ed9cb2a5f8a7c1dba44895be6bf56283c283c770741f451ba8a8bac6c170a4e3a5e07ba0d412505e33ef5856524d6c0d8b1553b19b28aee3790a6155932a3d3719ca2020a2078919861194") 06:28:54 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x1, 0x20000) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000080)={0x3, 0x0, 0x2, 0x8, 0x0, 0x8, 0xec4}) 06:28:54 executing program 4: syz_clone(0x0, &(0x7f0000000080)="754c99df09b3a48122a9de6ef3c945d12bc732380b973028de0b2ac78a2ba15fc35377771c2618076c264709e7b45498cbf6513d281a85ce5477e438624889e9ee0f3bb3f59dc9dbcbff93dfd0064bd6fb84e77ae33c11bcc11cb5e651", 0x5d, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="84ecc66bf34c4cf359861cb848cc919427891740ffc518faefddfb27a9ed9cb2a5f8a7c1dba44895be6bf56283c283c770741f451ba8a8bac6c170a4e3a5e07ba0d412505e33ef5856524d6c0d8b1553b19b28aee3790a6155932a3d3719ca2020a2078919861194") [ 1114.072585][ T8610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1114.075694][ T8613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:54 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)="84ecc66bf34c4cf359861cb848cc919427891740ffc518faefddfb27a9ed9cb2a5f8a7c1dba44895be6bf56283c283c770741f451ba8a8bac6c170a4e3a5e07ba0d412505e33ef5856524d6c0d8b1553b19b28aee3790a6155932a3d3719ca2020a2078919861194") 06:28:54 executing program 2: syz_clone(0x0, &(0x7f0000000080)="754c99df09b3a48122a9de6ef3c945d12bc732380b973028de0b2ac78a2ba15fc35377771c2618076c264709e7b45498cbf6513d281a85ce5477e438624889e9ee0f3bb3f59dc9dbcbff93dfd0064bd6fb84e77ae33c11bcc11cb5e651", 0x5d, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="84ecc66bf34c4cf359861cb848cc919427891740ffc518faefddfb27a9ed9cb2a5f8a7c1dba44895be6bf56283c283c770741f451ba8a8bac6c170a4e3a5e07ba0d412505e33ef5856524d6c0d8b1553b19b28aee3790a6155932a3d3719ca2020a2078919861194") 06:28:54 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x1, 0x20000) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000080)={0x3, 0x0, 0x2, 0x8, 0x0, 0x8, 0xec4}) 06:28:54 executing program 5: syz_clone(0x1c10a000, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:54 executing program 4: syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x2, 0x130001) getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) syz_clone(0x1c10a000, &(0x7f0000000080)="754c99df09b3a48122a9de6ef3c945d12bc732380b973028de0b2ac78a2ba15fc35377771c2618076c264709e7b45498cbf6513d281a85ce5477e438624889e9ee0f3bb3f59dc9dbcbff93dfd0064bd6fb84e77ae33c11bcc11cb5e651", 0x5d, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="84ecc66bf34c4cf359861cb848cc919427891740ffc518faefddfb27a9ed9cb2a5f8a7c1dba44895be6bf56283c283c770741f451ba8a8bac6c170a4e3a5e07ba0d412505e33ef5856524d6c0d8b1553b19b28aee3790a6155932a3d3719ca2020a2078919861194") 06:28:54 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x20000) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000080)={0x3, 0x0, 0x2, 0x8, 0x0, 0x8, 0xec4}) 06:28:54 executing program 3: ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{@fixed}]}) (async) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x0) 06:28:54 executing program 2: syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x2, 0x130001) getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0) setuid(r0) syz_clone(0x1c10a000, &(0x7f0000000080)="754c99df09b3a48122a9de6ef3c945d12bc732380b973028de0b2ac78a2ba15fc35377771c2618076c264709e7b45498cbf6513d281a85ce5477e438624889e9ee0f3bb3f59dc9dbcbff93dfd0064bd6fb84e77ae33c11bcc11cb5e651", 0x5d, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="84ecc66bf34c4cf359861cb848cc919427891740ffc518faefddfb27a9ed9cb2a5f8a7c1dba44895be6bf56283c283c770741f451ba8a8bac6c170a4e3a5e07ba0d412505e33ef5856524d6c0d8b1553b19b28aee3790a6155932a3d3719ca2020a2078919861194") [ 1114.418543][ T8643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:55 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r2, 0x21, 0x0, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async, rerun: 32) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 32) setsockopt$inet6_dccp_buf(r4, 0x21, 0x0, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x70, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7ff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x178000000000000}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0xc001) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="5f9aa229de970f2c03493f0adc06c14efe04a20e", @ANYRES16=0x0, @ANYBLOB="000829bd7000fbdbdf250100000008000100020000000c0006000100000001000000080001000100000008000300", @ANYRES32=r6, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4005}, 0x4000000) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r7, 0x0, 0x0) (async) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan1\x00'}) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r8, 0x18, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xfa02022be4252baa}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x18}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:28:55 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x20000) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000080)={0x3, 0x0, 0x2, 0x8, 0x0, 0x8, 0xec4}) 06:28:55 executing program 5: pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000480)={0x0, 0x7, &(0x7f00000003c0)=[0x6, 0x0, 0x3, 0x0, 0x1, 0x4, 0xa7], &(0x7f0000000400)=[0x9], &(0x7f0000000440)=[0xff00]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r5) sendmsg$IEEE802154_LIST_IFACE(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r7, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r7, 0x533, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) sendmsg$NBD_CMD_RECONFIGURE(r4, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r8) sendmsg$IEEE802154_LIST_IFACE(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r10, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800020}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r10, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x20, r2, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x44040}, 0x1) 06:28:55 executing program 4: syz_clone(0x88208080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x40000, &(0x7f0000000000)="79dae72eb2f36e4cd9062faf13b24e5ea244030eaa38f72be68e59d9f8eb0ef439840a96513e198f8d26160a1ee1886c13346f8aaa2445a9f510aca89e6932a5e0394e9a1c8ddae2ce310f3123352d2247535562d51d5a66ec91f6dae084b49ecede7d7f1a789b41b7ef7bff73254a23b3792b940587191b17072b2c04a4db82f15a7a90f162fa839f2f0cfd4f61a5d41be1d454abee554d58df193f36b32b84333c1827cb3ea217bcb38aa9c3d67bc36084d297045895", 0xb7, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="e0033d47193c85b58633ded42e310cd19cda9a8a47a57a6cb7a21d0364dd461bcd83") 06:28:55 executing program 2: ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{@fixed}]}) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x0) [ 1114.547664][ T8650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:55 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x20000) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000080)={0x3, 0x0, 0x2, 0x8, 0x0, 0x8, 0xec4}) [ 1114.579323][ T8656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:55 executing program 5: pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000480)={0x0, 0x7, &(0x7f00000003c0)=[0x6, 0x0, 0x3, 0x0, 0x1, 0x4, 0xa7], &(0x7f0000000400)=[0x9], &(0x7f0000000440)=[0xff00]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r5) sendmsg$IEEE802154_LIST_IFACE(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r7, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r7, 0x533, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) sendmsg$NBD_CMD_RECONFIGURE(r4, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r8) sendmsg$IEEE802154_LIST_IFACE(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r10, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800020}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r10, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x20, r2, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x44040}, 0x1) 06:28:55 executing program 4: prctl$PR_GET_THP_DISABLE(0x2a) syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) syz_clone(0x241400, 0x0, 0xfffffffffffffdce, 0x0, 0x0, 0x0) 06:28:55 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000080)={0x3, 0x0, 0x2, 0x8, 0x0, 0x8, 0xec4}) 06:28:55 executing program 3: ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{@fixed}]}) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x0) 06:28:55 executing program 1: syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000080)={0x3, 0x0, 0x2, 0x8, 0x0, 0x8, 0xec4}) [ 1114.774595][ T8670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:55 executing program 5: pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000480)={0x0, 0x7, &(0x7f00000003c0)=[0x6, 0x0, 0x3, 0x0, 0x1, 0x4, 0xa7], &(0x7f0000000400)=[0x9], &(0x7f0000000440)=[0xff00]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r5) sendmsg$IEEE802154_LIST_IFACE(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r7, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r7, 0x533, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) sendmsg$NBD_CMD_RECONFIGURE(r4, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r8) sendmsg$IEEE802154_LIST_IFACE(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r10, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800020}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r10, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x20, r2, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x44040}, 0x1) 06:28:55 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r2, 0x21, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r4, 0x21, 0x0, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x70, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7ff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x178000000000000}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0xc001) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="5f9aa229de970f2c03493f0adc06c14efe04a20e", @ANYRES16=0x0, @ANYBLOB="000829bd7000fbdbdf250100000008000100020000000c0006000100000001000000080001000100000008000300", @ANYRES32=r6, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4005}, 0x4000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r7, 0x0, 0x0) (async) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan1\x00'}) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r8, 0x18, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xfa02022be4252baa}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x18}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:28:55 executing program 1: syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000080)={0x3, 0x0, 0x2, 0x8, 0x0, 0x8, 0xec4}) 06:28:55 executing program 2: ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{@fixed}]}) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x0) 06:28:55 executing program 4: prctl$PR_GET_THP_DISABLE(0x2a) syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) syz_clone(0x241400, 0x0, 0xfffffffffffffdce, 0x0, 0x0, 0x0) 06:28:55 executing program 5: pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000480)={0x0, 0x7, &(0x7f00000003c0)=[0x6, 0x0, 0x3, 0x0, 0x1, 0x4, 0xa7], &(0x7f0000000400)=[0x9], &(0x7f0000000440)=[0xff00]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r4) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r6, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r6, 0x533, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) sendmsg$NBD_CMD_RECONFIGURE(r3, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r7) sendmsg$IEEE802154_LIST_IFACE(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r9, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800020}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r9, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) [ 1115.102550][ T8684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1115.112177][ T8683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:55 executing program 3: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0) 06:28:55 executing program 1: syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000080)={0x3, 0x0, 0x2, 0x8, 0x0, 0x8, 0xec4}) [ 1115.161796][ T8691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:55 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, 0x0) 06:28:55 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r5, 0x21, 0x0, 0x0, 0x0) bind$phonet(r5, &(0x7f00000001c0)={0x23, 0x1, 0x4, 0x5}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r4, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r4, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x58, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2b}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 06:28:55 executing program 5: pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000480)={0x0, 0x7, &(0x7f00000003c0)=[0x6, 0x0, 0x3, 0x0, 0x1, 0x4, 0xa7], &(0x7f0000000400)=[0x9], &(0x7f0000000440)=[0xff00]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r4) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r6, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r6, 0x533, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) sendmsg$NBD_CMD_RECONFIGURE(r3, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r7) sendmsg$IEEE802154_LIST_IFACE(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r9, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}}, 0x0) 06:28:55 executing program 1: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0xffffffff00000000) [ 1115.261180][ T8700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:55 executing program 5: pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000480)={0x0, 0x7, &(0x7f00000003c0)=[0x6, 0x0, 0x3, 0x0, 0x1, 0x4, 0xa7], &(0x7f0000000400)=[0x9], &(0x7f0000000440)=[0xff00]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r4) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r6, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r6, 0x533, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) sendmsg$NBD_CMD_RECONFIGURE(r3, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r7) [ 1115.278015][ T8702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:55 executing program 5: pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000480)={0x0, 0x7, &(0x7f00000003c0)=[0x6, 0x0, 0x3, 0x0, 0x1, 0x4, 0xa7], &(0x7f0000000400)=[0x9], &(0x7f0000000440)=[0xff00]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r4) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r6, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r6, 0x533, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) sendmsg$NBD_CMD_RECONFIGURE(r3, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:28:55 executing program 4: prctl$PR_GET_THP_DISABLE(0x2a) syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) syz_clone(0x241400, 0x0, 0xfffffffffffffdce, 0x0, 0x0, 0x0) 06:28:56 executing program 2: ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{@fixed}]}) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x0) 06:28:56 executing program 5: pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000480)={0x0, 0x7, &(0x7f00000003c0)=[0x6, 0x0, 0x3, 0x0, 0x1, 0x4, 0xa7], &(0x7f0000000400)=[0x9], &(0x7f0000000440)=[0xff00]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r4) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r6, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r6, 0x533, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) sendmsg$NBD_CMD_RECONFIGURE(r3, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 1115.471717][ T8711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:56 executing program 3: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0) (async) 06:28:56 executing program 4: prctl$PR_GET_THP_DISABLE(0x2a) syz_clone(0x241400, 0x0, 0xfffffffffffffdce, 0x0, 0x0, 0x0) [ 1115.531619][ T8715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1115.544146][ T8716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:56 executing program 5: pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000480)={0x0, 0x7, &(0x7f00000003c0)=[0x6, 0x0, 0x3, 0x0, 0x1, 0x4, 0xa7], &(0x7f0000000400)=[0x9], &(0x7f0000000440)=[0xff00]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r4) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r6, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r6, 0x533, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) sendmsg$NBD_CMD_RECONFIGURE(r3, 0x0, 0x0) 06:28:56 executing program 1: syz_clone(0x8002100, 0x0, 0x37, 0x0, 0x0, 0x0) 06:28:56 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) (async) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r5, 0x21, 0x0, 0x0, 0x0) (async) bind$phonet(r5, &(0x7f00000001c0)={0x23, 0x1, 0x4, 0x5}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r4, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r4, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x58, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2b}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 06:28:56 executing program 4: syz_clone(0x241400, 0x0, 0xfffffffffffffdce, 0x0, 0x0, 0x0) 06:28:56 executing program 5: pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000480)={0x0, 0x7, &(0x7f00000003c0)=[0x6, 0x0, 0x3, 0x0, 0x1, 0x4, 0xa7], &(0x7f0000000400)=[0x9], &(0x7f0000000440)=[0xff00]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r3) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r5, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r5, 0x533, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) 06:28:56 executing program 1: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x6c00000000000000) [ 1115.712598][ T8731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1115.722079][ T8735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1115.725875][ T8734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:56 executing program 5: pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000480)={0x0, 0x7, &(0x7f00000003c0)=[0x6, 0x0, 0x3, 0x0, 0x1, 0x4, 0xa7], &(0x7f0000000400)=[0x9], &(0x7f0000000440)=[0xff00]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r3) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r4, 0x533, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) 06:28:56 executing program 4: syz_clone(0x0, 0x0, 0xfffffffffffffdce, 0x0, 0x0, 0x0) 06:28:56 executing program 2: getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 06:28:56 executing program 5: pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000480)={0x0, 0x7, &(0x7f00000003c0)=[0x6, 0x0, 0x3, 0x0, 0x1, 0x4, 0xa7], &(0x7f0000000400)=[0x9], &(0x7f0000000440)=[0xff00]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x533, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) 06:28:56 executing program 3: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0) (async) 06:28:56 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) (async) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) (async) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r5, 0x21, 0x0, 0x0, 0x0) (async, rerun: 32) bind$phonet(r5, &(0x7f00000001c0)={0x23, 0x1, 0x4, 0x5}, 0x10) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r4, 0x29, 0x0, 0x0, 0x1000, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x101}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f0000001a00)={'ip6tnl0\x00', r4, 0x0, 0x7, 0x0, 0x8, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x3f}}) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x58, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2b}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 06:28:56 executing program 4: syz_clone(0x0, 0x0, 0xfffffffffffffdce, 0x0, 0x0, 0x0) [ 1115.871909][ T8748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1115.876322][ T8749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:56 executing program 2: r0 = syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/net\x00') migrate_pages(r1, 0x9d27, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x3, 0x1f, {r0}, {0x0}, 0xd27, 0xc59}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x0, 0x1, {r1}, {r2}, 0x7, 0x8}) 06:28:56 executing program 0: bind$phonet(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0x20, 0x3, 0x3}, 0x10) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="98000000", @ANYRES16=0x0, @ANYBLOB="02002bbd7000fcdbdf250500000030000180060005004e200000080003007f000001080003000000000014000400fc020000000000000000000000000000080003000200000044000180050002000400000014000400fc020000000000000000000000000001080006000000000008000700", @ANYRES32=0x0, @ANYBLOB="14000400fc0100000000000000cacf9b9986ad519e000300020000008e53c5e4bbc0efacd80f3ec0c259f80fdf6b4f49d25040421785ee0f4aed8d0b9454730c7d616ce808c7adddf7cffe63419f43cbd61be9b4045bbc9bde9d"], 0x98}, 0x1, 0x0, 0x0, 0x4800}, 0x0) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) recvfrom$phonet(r0, &(0x7f0000000100)=""/150, 0x96, 0xbc4c7aaa23b704ab, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) 06:28:56 executing program 5: pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000480)={0x0, 0x7, &(0x7f00000003c0)=[0x6, 0x0, 0x3, 0x0, 0x1, 0x4, 0xa7], &(0x7f0000000400)=[0x9], &(0x7f0000000440)=[0xff00]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x533, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) [ 1115.910952][ T8753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1115.940237][ T8756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:56 executing program 0: bind$phonet(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0x20, 0x3, 0x3}, 0x10) (async, rerun: 32) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 32) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="98000000", @ANYRES16=0x0, @ANYBLOB="02002bbd7000fcdbdf250500000030000180060005004e200000080003007f000001080003000000000014000400fc020000000000000000000000000000080003000200000044000180050002000400000014000400fc020000000000000000000000000001080006000000000008000700", @ANYRES32=0x0, @ANYBLOB="14000400fc0100000000000000cacf9b9986ad519e000300020000008e53c5e4bbc0efacd80f3ec0c259f80fdf6b4f49d25040421785ee0f4aed8d0b9454730c7d616ce808c7adddf7cffe63419f43cbd61be9b4045bbc9bde9d"], 0x98}, 0x1, 0x0, 0x0, 0x4800}, 0x0) (async, rerun: 64) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) (rerun: 64) recvfrom$phonet(r0, &(0x7f0000000100)=""/150, 0x96, 0xbc4c7aaa23b704ab, 0x0, 0x0) (async) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) 06:28:56 executing program 1: pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000480)={0x0, 0x7, &(0x7f00000003c0)=[0x6, 0x0, 0x3, 0x0, 0x1, 0x4, 0xa7], &(0x7f0000000400)=[0x9], &(0x7f0000000440)=[0xff00]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x533, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) 06:28:56 executing program 4: syz_clone(0x0, 0x0, 0xfffffffffffffdce, 0x0, 0x0, 0x0) 06:28:56 executing program 5: pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000480)={0x0, 0x7, &(0x7f00000003c0)=[0x6, 0x0, 0x3, 0x0, 0x1, 0x4, 0xa7], &(0x7f0000000400)=[0x9], &(0x7f0000000440)=[0xff00]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x533, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) 06:28:56 executing program 0: bind$phonet(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0x20, 0x3, 0x3}, 0x10) (async) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="98000000", @ANYRES16=0x0, @ANYBLOB="02002bbd7000fcdbdf250500000030000180060005004e200000080003007f000001080003000000000014000400fc020000000000000000000000000000080003000200000044000180050002000400000014000400fc020000000000000000000000000001080006000000000008000700", @ANYRES32=0x0, @ANYBLOB="14000400fc0100000000000000cacf9b9986ad519e000300020000008e53c5e4bbc0efacd80f3ec0c259f80fdf6b4f49d25040421785ee0f4aed8d0b9454730c7d616ce808c7adddf7cffe63419f43cbd61be9b4045bbc9bde9d"], 0x98}, 0x1, 0x0, 0x0, 0x4800}, 0x0) (async) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) (async) recvfrom$phonet(r0, &(0x7f0000000100)=""/150, 0x96, 0xbc4c7aaa23b704ab, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) 06:28:56 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x9d27, 0x0, 0x0) ioprio_get$pid(0x0, r0) [ 1116.152291][ T8782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:56 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6cd}, @device_a, @broadcast, @random="eb0f2c80167e", {0x1, 0x4}}, @val={0x0, 0x4, @random="4677f0df"}, @void, @void, @val={0x2d, 0x1a, {0x2000, 0x3, 0x7, 0x0, {0x0, 0xaac, 0x0, 0x136, 0x0, 0x1}, 0x300, 0x8, 0x5}}, @val={0x72, 0x6}, [{0xdd, 0x19, "c0bac5c1bfcd57661184472c3a4a8bedd28231de7d6cf21f25"}]}, 0x5d) 06:28:56 executing program 5: pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000480)={0x0, 0x7, &(0x7f00000003c0)=[0x6, 0x0, 0x3, 0x0, 0x1, 0x4, 0xa7], &(0x7f0000000400)=[0x9], &(0x7f0000000440)=[0xff00]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r3) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r4, 0x533, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) 06:28:56 executing program 2: r0 = syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/net\x00') migrate_pages(r1, 0x9d27, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x3, 0x1f, {r0}, {0x0}, 0xd27, 0xc59}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x0, 0x1, {r1}, {r2}, 0x7, 0x8}) 06:28:56 executing program 1: r0 = syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/net\x00') migrate_pages(r1, 0x9d27, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x3, 0x1f, {r0}, {0x0}, 0xd27, 0xc59}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x0, 0x1, {r1}, {r2}, 0x7, 0x8}) 06:28:56 executing program 4: syz_clone(0x0, 0x0, 0xfffffffffffffdce, 0x0, 0x0, 0x0) 06:28:56 executing program 5: pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000480)={0x0, 0x7, &(0x7f00000003c0)=[0x6, 0x0, 0x3, 0x0, 0x1, 0x4, 0xa7], &(0x7f0000000400)=[0x9], &(0x7f0000000440)=[0xff00]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r3, 0x533, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) [ 1116.324368][ T8793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1116.340448][ T8793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:56 executing program 5: pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000480)={0x0, 0x7, &(0x7f00000003c0)=[0x6, 0x0, 0x3, 0x0, 0x1, 0x4, 0xa7], &(0x7f0000000400)=[0x9], &(0x7f0000000440)=[0xff00]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r3, 0x533, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) 06:28:57 executing program 5: pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000480)={0x0, 0x7, &(0x7f00000003c0)=[0x6, 0x0, 0x3, 0x0, 0x1, 0x4, 0xa7], &(0x7f0000000400)=[0x9], &(0x7f0000000440)=[0xff00]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r3, 0x533, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) 06:28:57 executing program 2: r0 = syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/net\x00') migrate_pages(r1, 0x9d27, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x3, 0x1f, {r0}, {0x0}, 0xd27, 0xc59}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x0, 0x1, {r1}, {r2}, 0x7, 0x8}) 06:28:57 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x9d27, 0x0, 0x0) (async) ioprio_get$pid(0x0, r0) 06:28:57 executing program 4: pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000480)={0x0, 0x7, &(0x7f00000003c0)=[0x6, 0x0, 0x3, 0x0, 0x1, 0x4, 0xa7], &(0x7f0000000400)=[0x9], &(0x7f0000000440)=[0xff00]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r3, 0x533, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) [ 1116.567350][ T8810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:57 executing program 5: pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000480)={0x0, 0x7, &(0x7f00000003c0)=[0x6, 0x0, 0x3, 0x0, 0x1, 0x4, 0xa7], &(0x7f0000000400)=[0x9], &(0x7f0000000440)=[0xff00]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r3) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r4, 0x533, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) 06:28:57 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6cd}, @device_a, @broadcast, @random="eb0f2c80167e", {0x1, 0x4}}, @val={0x0, 0x4, @random="4677f0df"}, @void, @void, @val={0x2d, 0x1a, {0x2000, 0x3, 0x7, 0x0, {0x0, 0xaac, 0x0, 0x136, 0x0, 0x1}, 0x300, 0x8, 0x5}}, @val={0x72, 0x6}, [{0xdd, 0x19, "c0bac5c1bfcd57661184472c3a4a8bedd28231de7d6cf21f25"}]}, 0x5d) 06:28:57 executing program 1: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6cd}, @device_a, @broadcast, @random="eb0f2c80167e", {0x1, 0x4}}, @val={0x0, 0x4, @random="4677f0df"}, @void, @void, @val={0x2d, 0x1a, {0x2000, 0x3, 0x7, 0x0, {0x0, 0xaac, 0x0, 0x136, 0x0, 0x1}, 0x300, 0x8, 0x5}}, @val={0x72, 0x6}, [{0xdd, 0x19, "c0bac5c1bfcd57661184472c3a4a8bedd28231de7d6cf21f25"}]}, 0x5d) [ 1116.706231][ T8825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1116.724645][ T8824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1116.734990][ T8827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:57 executing program 5: pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000480)={0x0, 0x7, &(0x7f00000003c0)=[0x6, 0x0, 0x3, 0x0, 0x1, 0x4, 0xa7], &(0x7f0000000400)=[0x9], &(0x7f0000000440)=[0xff00]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r3) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r4, 0x533, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) [ 1116.797735][ T8827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:57 executing program 5: pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000480)={0x0, 0x7, &(0x7f00000003c0)=[0x6, 0x0, 0x3, 0x0, 0x1, 0x4, 0xa7], &(0x7f0000000400)=[0x9], &(0x7f0000000440)=[0xff00]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r2) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r3, 0x533, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) 06:28:57 executing program 2: r0 = syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/net\x00') migrate_pages(r1, 0x9d27, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x3, 0x1f, {r0}, {}, 0xd27, 0xc59}) 06:28:57 executing program 5: pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000480)={0x0, 0x7, &(0x7f00000003c0)=[0x6, 0x0, 0x3, 0x0, 0x1, 0x4, 0xa7], &(0x7f0000000400)=[0x9], &(0x7f0000000440)=[0xff00]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r2) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r3, 0x533, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) 06:28:57 executing program 5: pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000480)={0x0, 0x7, &(0x7f00000003c0)=[0x6, 0x0, 0x3, 0x0, 0x1, 0x4, 0xa7], &(0x7f0000000400)=[0x9], &(0x7f0000000440)=[0xff00]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r2, 0x533, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) 06:28:57 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x9d27, 0x0, 0x0) ioprio_get$pid(0x0, r0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) migrate_pages(r0, 0x9d27, 0x0, 0x0) (async) ioprio_get$pid(0x0, r0) (async) 06:28:57 executing program 4: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x4800000000000000) [ 1117.017715][ T8843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1117.030468][ T8845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:57 executing program 5: pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000480)={0x0, 0x7, &(0x7f00000003c0)=[0x6, 0x0, 0x3, 0x0, 0x1, 0x4, 0xa7], &(0x7f0000000400)=[0x9], &(0x7f0000000440)=[0xff00]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r2, 0x533, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) [ 1117.053996][ T8843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:57 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6cd}, @device_a, @broadcast, @random="eb0f2c80167e", {0x1, 0x4}}, @val={0x0, 0x4, @random="4677f0df"}, @void, @void, @val={0x2d, 0x1a, {0x2000, 0x3, 0x7, 0x0, {0x0, 0xaac, 0x0, 0x136, 0x0, 0x1}, 0x300, 0x8, 0x5}}, @val={0x72, 0x6}, [{0xdd, 0x19, "c0bac5c1bfcd57661184472c3a4a8bedd28231de7d6cf21f25"}]}, 0x5d) [ 1117.111301][ T8855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:57 executing program 5: pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000480)={0x0, 0x7, &(0x7f00000003c0)=[0x6, 0x0, 0x3, 0x0, 0x1, 0x4, 0xa7], &(0x7f0000000400)=[0x9], &(0x7f0000000440)=[0xff00]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r2, 0x533, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) 06:28:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r3) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r5, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x28}}, 0x20040880) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB="9ec46227d18e1b50c8ceb07a0eb7acbdbe3754ad9009361788433b7e565c988bd708e96ce97ce7b17ae6a81fb6b02d7d756992470c753d09d06fd4ac2a495b5a3b4be9ab373e9df79b90f464f475cedb2a5fc92b1f4b087dce5d952cd7d690bdf8521889b4d486dfcc447f7b1648aa75c5a32f908caf771fea4440a7e8127d2934a7", @ANYRES16=r6, @ANYBLOB="550900000000000000001f0000000a0001007770616e30000000"], 0x20}}, 0x0) [ 1117.148177][ T8856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:57 executing program 2: syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/net\x00') migrate_pages(r0, 0x9d27, 0x0, 0x0) 06:28:57 executing program 0: gettid() syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xa, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x4}, @device_a, @initial, @device_a, {0x2, 0x4}}, {0x0, 0x1, 0x1, 0x0, 0x3}}, {@type11={{0x0, 0x2, 0xe, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x1bf6}, @device_a, @broadcast, @random="83847c784658", {0x8, 0x1}}, {0x7, 0x0, 0x3}}}, @ver_80211n={0x0, 0x5, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, @a_msdu=[{@broadcast, @device_a, 0xef, "b48c721ceefbd775667a98c55214326bfa95dc8e01d3bc21bdaa0805438b047a8bc33a81c089752f9fb613307d62aa87ad9660d305fac109e82f50fb566d293c5a7ff9509048b04bc78c9aeb7b361c5e9b1d8656b91fc06b95e2ccd17fde49906a1f23da1fede29d0a4cf525d70876294c463399f5925626fcdf423b17dd300cddce7699c854c887112991406c07a7ffb8a5d013a9505176d871ea3b7ef9d0a641939e785724f8316b68b21d39e30ab02b3811a199421ec3c13473dd63c919d3715f2feea107882319cbbb997e70f81c7b44e95460c0419af2bd6e690c156b1d61260abc0b592608bf3c60b495aabd"}, {@broadcast, @broadcast, 0xef, "b840af76c4181fa7028e4d0052512c419088c9a005b215aac9162c2de1e4117393f19d0d4567d29dabeb644e98d645b121159078ff4b0d626c8bdbb0e79a962c01a194e90797d05acca67d6d92fe1175df5bf9f40da3f8b8d463d545c977140175cabb8bc11545f851e59fd04168185755d54db88cd9f444c61ab3537efd561ea814a05b306e74549dddcd6ce2d11c16e4f445ebb958cd96c40d3f031aa15549df9707eabc52e1c79cc142415a1d68ad9c6899769c1fd92f2051029df48ca7fa4c2afa9c1119deed9cda82214be9d240e2f18a3efa917268f42e41bb580f68db85492badbc7b21754330e5a0e98b07"}]}, 0x23e) syz_open_dev$dri(&(0x7f0000000480), 0x1, 0x4a000) syz_80211_inject_frame(&(0x7f00000002c0)=@broadcast, &(0x7f0000000300)=@mgmt_frame=@reassoc_req={@wo_ht={{0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, {0x7}, @device_b, @device_a, @random="72cf68f80bd5", {0x2, 0x80}}, 0x2080, 0x3, @device_b, {0x0, 0x6, @default_ap_ssid}, @void, @val={0x2d, 0x1a, {0x20, 0x0, 0x4, 0x0, {0x1, 0x3b8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8, 0xa24, 0x2}}, [{0xdd, 0x75, "c1921c804940a6778d00bedf93d8b4576e60ecd7fe248a64cdb6d617d7eedd753cb5af3ac00068bffd6b329df92b5e9384a8ce17e3fb5c60c8b1d6876e08fd7b426d9fb879b1bc21c1ceab94dce934469136f1e663c526c854e5df649708ee698136a95099000c1032f2d8bda30c5a553efde8291c"}, {0xdd, 0x95, "71fd345722febbaef847221735c9e736a44801ee2fe47d1958ee59c5309c81b2cd67181ddbb124992403a16d8eb09a33a2be0a0093f829d70ab6fc6966c5f1f56652d32712463f7ed1ed0199e4f2042b622db4e8ef072932c7c6f6695e75f66f4a6551e1994ff6413b91469d975c3b00228a7c0f28411e4f7393d895d8cef1f946c958f90176f8759cf72312458f0b790cf1808b02"}]}, 0x154) 06:28:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r3) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r5, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x28}}, 0x20040880) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB="9ec46227d18e1b50c8ceb07a0eb7acbdbe3754ad9009361788433b7e565c988bd708e96ce97ce7b17ae6a81fb6b02d7d756992470c753d09d06fd4ac2a495b5a3b4be9ab373e9df79b90f464f475cedb2a5fc92b1f4b087dce5d952cd7d690bdf8521889b4d486dfcc447f7b1648aa75c5a32f908caf771fea4440a7e8127d2934a7", @ANYRES16=r6, @ANYBLOB="550900000000000000001f0000000a0001007770616e30000000"], 0x20}}, 0x0) [ 1117.252825][ T8865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:57 executing program 5: pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r2) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r3, 0x533, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) [ 1117.283623][ T8865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1117.310939][ T8865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r3) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r5, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x28}}, 0x20040880) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB="9ec46227d18e1b50c8ceb07a0eb7acbdbe3754ad9009361788433b7e565c988bd708e96ce97ce7b17ae6a81fb6b02d7d756992470c753d09d06fd4ac2a495b5a3b4be9ab373e9df79b90f464f475cedb2a5fc92b1f4b087dce5d952cd7d690bdf8521889b4d486dfcc447f7b1648aa75c5a32f908caf771fea4440a7e8127d2934a7", @ANYRES16=r6, @ANYBLOB="550900000000000000001f0000000a0001007770616e30000000"], 0x20}}, 0x0) 06:28:57 executing program 5: pipe2$watch_queue(&(0x7f0000000400), 0x80) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r2, 0x533, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) 06:28:57 executing program 4: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x7a00000000000000) [ 1117.411670][ T8878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r3) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r5, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x28}}, 0x20040880) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) 06:28:58 executing program 2: syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/net\x00') 06:28:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x14, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000841}, 0x20000000) syz_open_dev$vcsa(&(0x7f0000000100), 0x10000009d5, 0x4200) r3 = syz_open_dev$dri(&(0x7f0000000380), 0x8, 0x141000) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000600)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYRES8=r3, @ANYRESDEC=0x0, @ANYBLOB="02002bbd7000fedbdf250300000008000200fcffffff14000100fe80000000000000000000000000003708000200560000000c000400800000000100000008000200800100000500060006000000050006000500000005000500020000001000040008000000d7a8000006000000"], 0x74}, 0x1, 0x0, 0x0, 0x20048010}, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x80, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r1}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffffffffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xb2b6}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0xc50) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r4, 0x21, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f00000003c0)=""/195, &(0x7f00000004c0)=0xc3) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:28:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r2, 0x533, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) 06:28:58 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r2) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r4, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x28}}, 0x20040880) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) [ 1117.582551][ T8887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(0x0, r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r2, 0x533, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) 06:28:58 executing program 0: gettid() syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xa, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x4}, @device_a, @initial, @device_a, {0x2, 0x4}}, {0x0, 0x1, 0x1, 0x0, 0x3}}, {@type11={{0x0, 0x2, 0xe, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x1bf6}, @device_a, @broadcast, @random="83847c784658", {0x8, 0x1}}, {0x7, 0x0, 0x3}}}, @ver_80211n={0x0, 0x5, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, @a_msdu=[{@broadcast, @device_a, 0xef, "b48c721ceefbd775667a98c55214326bfa95dc8e01d3bc21bdaa0805438b047a8bc33a81c089752f9fb613307d62aa87ad9660d305fac109e82f50fb566d293c5a7ff9509048b04bc78c9aeb7b361c5e9b1d8656b91fc06b95e2ccd17fde49906a1f23da1fede29d0a4cf525d70876294c463399f5925626fcdf423b17dd300cddce7699c854c887112991406c07a7ffb8a5d013a9505176d871ea3b7ef9d0a641939e785724f8316b68b21d39e30ab02b3811a199421ec3c13473dd63c919d3715f2feea107882319cbbb997e70f81c7b44e95460c0419af2bd6e690c156b1d61260abc0b592608bf3c60b495aabd"}, {@broadcast, @broadcast, 0xef, "b840af76c4181fa7028e4d0052512c419088c9a005b215aac9162c2de1e4117393f19d0d4567d29dabeb644e98d645b121159078ff4b0d626c8bdbb0e79a962c01a194e90797d05acca67d6d92fe1175df5bf9f40da3f8b8d463d545c977140175cabb8bc11545f851e59fd04168185755d54db88cd9f444c61ab3537efd561ea814a05b306e74549dddcd6ce2d11c16e4f445ebb958cd96c40d3f031aa15549df9707eabc52e1c79cc142415a1d68ad9c6899769c1fd92f2051029df48ca7fa4c2afa9c1119deed9cda82214be9d240e2f18a3efa917268f42e41bb580f68db85492badbc7b21754330e5a0e98b07"}]}, 0x23e) (async) syz_open_dev$dri(&(0x7f0000000480), 0x1, 0x4a000) (async) syz_80211_inject_frame(&(0x7f00000002c0)=@broadcast, &(0x7f0000000300)=@mgmt_frame=@reassoc_req={@wo_ht={{0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, {0x7}, @device_b, @device_a, @random="72cf68f80bd5", {0x2, 0x80}}, 0x2080, 0x3, @device_b, {0x0, 0x6, @default_ap_ssid}, @void, @val={0x2d, 0x1a, {0x20, 0x0, 0x4, 0x0, {0x1, 0x3b8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8, 0xa24, 0x2}}, [{0xdd, 0x75, "c1921c804940a6778d00bedf93d8b4576e60ecd7fe248a64cdb6d617d7eedd753cb5af3ac00068bffd6b329df92b5e9384a8ce17e3fb5c60c8b1d6876e08fd7b426d9fb879b1bc21c1ceab94dce934469136f1e663c526c854e5df649708ee698136a95099000c1032f2d8bda30c5a553efde8291c"}, {0xdd, 0x95, "71fd345722febbaef847221735c9e736a44801ee2fe47d1958ee59c5309c81b2cd67181ddbb124992403a16d8eb09a33a2be0a0093f829d70ab6fc6966c5f1f56652d32712463f7ed1ed0199e4f2042b622db4e8ef072932c7c6f6695e75f66f4a6551e1994ff6413b91469d975c3b00228a7c0f28411e4f7393d895d8cef1f946c958f90176f8759cf72312458f0b790cf1808b02"}]}, 0x154) 06:28:58 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r3, 0x3c5ae93e4bd80955, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x28}}, 0x20040880) [ 1117.692659][ T8896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(0x0, r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r2, 0x533, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) 06:28:58 executing program 4: r0 = syz_clone(0x80028000, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, r0, &(0x7f0000000000), 0x8, 0x0) 06:28:58 executing program 2: syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:58 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x28}}, 0x20040880) 06:28:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(0x0, r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r2, 0x533, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) 06:28:58 executing program 0: gettid() syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xa, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x4}, @device_a, @initial, @device_a, {0x2, 0x4}}, {0x0, 0x1, 0x1, 0x0, 0x3}}, {@type11={{0x0, 0x2, 0xe, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x1bf6}, @device_a, @broadcast, @random="83847c784658", {0x8, 0x1}}, {0x7, 0x0, 0x3}}}, @ver_80211n={0x0, 0x5, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, @a_msdu=[{@broadcast, @device_a, 0xef, "b48c721ceefbd775667a98c55214326bfa95dc8e01d3bc21bdaa0805438b047a8bc33a81c089752f9fb613307d62aa87ad9660d305fac109e82f50fb566d293c5a7ff9509048b04bc78c9aeb7b361c5e9b1d8656b91fc06b95e2ccd17fde49906a1f23da1fede29d0a4cf525d70876294c463399f5925626fcdf423b17dd300cddce7699c854c887112991406c07a7ffb8a5d013a9505176d871ea3b7ef9d0a641939e785724f8316b68b21d39e30ab02b3811a199421ec3c13473dd63c919d3715f2feea107882319cbbb997e70f81c7b44e95460c0419af2bd6e690c156b1d61260abc0b592608bf3c60b495aabd"}, {@broadcast, @broadcast, 0xef, "b840af76c4181fa7028e4d0052512c419088c9a005b215aac9162c2de1e4117393f19d0d4567d29dabeb644e98d645b121159078ff4b0d626c8bdbb0e79a962c01a194e90797d05acca67d6d92fe1175df5bf9f40da3f8b8d463d545c977140175cabb8bc11545f851e59fd04168185755d54db88cd9f444c61ab3537efd561ea814a05b306e74549dddcd6ce2d11c16e4f445ebb958cd96c40d3f031aa15549df9707eabc52e1c79cc142415a1d68ad9c6899769c1fd92f2051029df48ca7fa4c2afa9c1119deed9cda82214be9d240e2f18a3efa917268f42e41bb580f68db85492badbc7b21754330e5a0e98b07"}]}, 0x23e) (async) syz_open_dev$dri(&(0x7f0000000480), 0x1, 0x4a000) (async) syz_80211_inject_frame(&(0x7f00000002c0)=@broadcast, &(0x7f0000000300)=@mgmt_frame=@reassoc_req={@wo_ht={{0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, {0x7}, @device_b, @device_a, @random="72cf68f80bd5", {0x2, 0x80}}, 0x2080, 0x3, @device_b, {0x0, 0x6, @default_ap_ssid}, @void, @val={0x2d, 0x1a, {0x20, 0x0, 0x4, 0x0, {0x1, 0x3b8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8, 0xa24, 0x2}}, [{0xdd, 0x75, "c1921c804940a6778d00bedf93d8b4576e60ecd7fe248a64cdb6d617d7eedd753cb5af3ac00068bffd6b329df92b5e9384a8ce17e3fb5c60c8b1d6876e08fd7b426d9fb879b1bc21c1ceab94dce934469136f1e663c526c854e5df649708ee698136a95099000c1032f2d8bda30c5a553efde8291c"}, {0xdd, 0x95, "71fd345722febbaef847221735c9e736a44801ee2fe47d1958ee59c5309c81b2cd67181ddbb124992403a16d8eb09a33a2be0a0093f829d70ab6fc6966c5f1f56652d32712463f7ed1ed0199e4f2042b622db4e8ef072932c7c6f6695e75f66f4a6551e1994ff6413b91469d975c3b00228a7c0f28411e4f7393d895d8cef1f946c958f90176f8759cf72312458f0b790cf1808b02"}]}, 0x154) [ 1117.868740][ T8913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1117.871723][ T8914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1117.895881][ T8913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x14, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000841}, 0x20000000) syz_open_dev$vcsa(&(0x7f0000000100), 0x10000009d5, 0x4200) r3 = syz_open_dev$dri(&(0x7f0000000380), 0x8, 0x141000) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000600)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYRES8=r3, @ANYRESDEC=0x0, @ANYBLOB="02002bbd7000fedbdf250300000008000200fcffffff14000100fe80000000000000000000000000003708000200560000000c000400800000000100000008000200800100000500060006000000050006000500000005000500020000001000040008000000d7a8000006000000"], 0x74}, 0x1, 0x0, 0x0, 0x20048010}, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x80, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r1}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffffffffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xb2b6}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0xc50) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r4, 0x21, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f00000003c0)=""/195, &(0x7f00000004c0)=0xc3) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000080), 0x80) (async) pipe2$watch_queue(&(0x7f00000000c0), 0x80) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x14, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000841}, 0x20000000) (async) syz_open_dev$vcsa(&(0x7f0000000100), 0x10000009d5, 0x4200) (async) syz_open_dev$dri(&(0x7f0000000380), 0x8, 0x141000) (async) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000600)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYRES8=r3, @ANYRESDEC=0x0, @ANYBLOB="02002bbd7000fedbdf250300000008000200fcffffff14000100fe80000000000000000000000000003708000200560000000c000400800000000100000008000200800100000500060006000000050006000500000005000500020000001000040008000000d7a8000006000000"], 0x74}, 0x1, 0x0, 0x0, 0x20048010}, 0x0) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x80, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r1}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffffffffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xb2b6}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0xc50) (async) pipe2$watch_queue(&(0x7f0000000400), 0x80) (async) setsockopt$inet6_dccp_buf(r4, 0x21, 0x0, 0x0, 0x0) (async) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f00000003c0)=""/195, &(0x7f00000004c0)=0xc3) (async) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) 06:28:58 executing program 4: syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/net\x00') 06:28:58 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x28}}, 0x20040880) 06:28:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r1, 0x533, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) [ 1118.032843][ T8928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:58 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x28}}, 0x20040880) 06:28:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r1, 0x533, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) 06:28:58 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x14, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000841}, 0x20000000) syz_open_dev$vcsa(&(0x7f0000000100), 0x10000009d5, 0x4200) r3 = syz_open_dev$dri(&(0x7f0000000380), 0x8, 0x141000) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000600)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYRES8=r3, @ANYRESDEC=0x0, @ANYBLOB="02002bbd7000fedbdf250300000008000200fcffffff14000100fe80000000000000000000000000003708000200560000000c000400800000000100000008000200800100000500060006000000050006000500000005000500020000001000040008000000d7a8000006000000"], 0x74}, 0x1, 0x0, 0x0, 0x20048010}, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x80, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r1}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffffffffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xb2b6}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0xc50) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_dccp_buf(r4, 0x21, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f00000003c0)=""/195, &(0x7f00000004c0)=0xc3) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000080), 0x80) (async) pipe2$watch_queue(&(0x7f00000000c0), 0x80) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x14, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000841}, 0x20000000) (async) syz_open_dev$vcsa(&(0x7f0000000100), 0x10000009d5, 0x4200) (async) syz_open_dev$dri(&(0x7f0000000380), 0x8, 0x141000) (async) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000600)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYRES8=r3, @ANYRESDEC=0x0, @ANYBLOB="02002bbd7000fedbdf250300000008000200fcffffff14000100fe80000000000000000000000000003708000200560000000c000400800000000100000008000200800100000500060006000000050006000500000005000500020000001000040008000000d7a8000006000000"], 0x74}, 0x1, 0x0, 0x0, 0x20048010}, 0x0) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x80, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r1}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffffffffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xb2b6}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0xc50) (async) pipe2$watch_queue(&(0x7f0000000400), 0x80) (async) setsockopt$inet6_dccp_buf(r4, 0x21, 0x0, 0x0, 0x0) (async) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f00000003c0)=""/195, &(0x7f00000004c0)=0xc3) (async) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) 06:28:58 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1118.204773][ T8948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:58 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:58 executing program 4: syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/net\x00') 06:28:58 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) brk(0x80000000) 06:28:58 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x28}}, 0x20040880) 06:28:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r1, 0x533, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) [ 1118.256767][ T8955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:58 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x28}}, 0x20040880) [ 1118.317937][ T8948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:58 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r1, 0x533, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) 06:28:58 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:58 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0xb, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x80}, @device_b, @from_mac=@device_b, @device_b, {0xe, 0x3}}, {0x7, 0x0, 0x3, 0x0, 0x3}}, {@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x2}, @broadcast, @initial, @initial, {0x6, 0x462}}, {0x7, 0x1, 0x1, 0x1, 0xfe}}}, @random="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"}, 0x723) 06:28:59 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x28}}, 0x20040880) 06:28:59 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r1, 0x533, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) [ 1118.459714][ T8986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1118.474230][ T8986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:59 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:59 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r1, 0x533, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) 06:28:59 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, 0x0, 0x4000) 06:28:59 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x28}}, 0x20040880) 06:28:59 executing program 4: syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/net\x00') 06:28:59 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) brk(0x80000000) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) brk(0x80000000) (async) 06:28:59 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1118.638694][ T9003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1118.648754][ T9003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:59 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, 0x0, 0x4000) 06:28:59 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x28}}, 0x20040880) 06:28:59 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0xb, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x80}, @device_b, @from_mac=@device_b, @device_b, {0xe, 0x3}}, {0x7, 0x0, 0x3, 0x0, 0x3}}, {@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x2}, @broadcast, @initial, @initial, {0x6, 0x462}}, {0x7, 0x1, 0x1, 0x1, 0xfe}}}, @random="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"}, 0x723) 06:28:59 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x28}}, 0x20040880) 06:28:59 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, 0x0, 0x4000) 06:28:59 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0xb, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x80}, @device_b, @from_mac=@device_b, @device_b, {0xe, 0x3}}, {0x7, 0x0, 0x3, 0x0, 0x3}}, {@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x2}, @broadcast, @initial, @initial, {0x6, 0x462}}, {0x7, 0x1, 0x1, 0x1, 0xfe}}}, @random="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"}, 0x723) [ 1118.863491][ T9021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1118.872011][ T9021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:59 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r2, 0x533, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) 06:28:59 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x28}}, 0x20040880) [ 1118.930337][ T9027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1118.952308][ T9027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:59 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x4000) 06:28:59 executing program 4: syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:59 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x28}}, 0x20040880) 06:28:59 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) brk(0x80000000) 06:28:59 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x4000) [ 1119.043610][ T9036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1119.050702][ T9037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:59 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x28}}, 0x20040880) 06:28:59 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x4000) 06:28:59 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:59 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0xb, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x80}, @device_b, @from_mac=@device_b, @device_b, {0xe, 0x3}}, {0x7, 0x0, 0x3, 0x0, 0x3}}, {@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x2}, @broadcast, @initial, @initial, {0x6, 0x462}}, {0x7, 0x1, 0x1, 0x1, 0xfe}}}, @random="9d0727d98a4265e48c6cc233befe2c065c128b00ac47c292cae3ea261a605e30a155ff005bcb21f3e3f44a435a458dc2339f258ec3da99b71e9102d8002137e3e806abf16854d57bb5d79d9d2fd012789eaaf0957516255d568879b248d0e81a7dab55843193084972174d7bda29d7911f83aa524973bfb3c29ce5a1c0f83a6e17ec56e77d40b55e77ca8cfb3ff2c75c21040b38cedb91f2f80931f16c593d82ac75dde9e6b6fc9d908b78492f3db56e697980743cbb74f64243eef8ef49d0ed59c0c6f24d8c2af448057cdb73a5954a88d7490c65eeb9d105c7f186b2204856a7e6174fb8af4f01eedfed29c1e6472b976779901b68e6b15e68782fea5f9b6cf99b2533f195f379a0d990a229591da47fee53906d9974287dbe151ba0833e68d61adb8cfaa61b8022b5f9b4470e30e09c9294500aab75e21fe08c8cbd73b46628c6a45c2ebb96c100719b03e4a922e039b0f93bc5f642040eca41313014642b2d3c9aee45c2eb7dfc7fec75b7726ff3c9104706efcb6d3ea6b610a68237c86f3e782458f94cacb915c0c30445186e2ba0cd09b03b37c1a5144944b97ef5e47b9be1037637c5453e997fe146d997376099fccd69b41882a13b37afbe6507c4e1f49c344d0017454614a253acbc87dd99de2e23a0a0dfc7763eda2c692bf191c3bf08437ffa0bfc736b16fa1df9452d62f2a6c062181039cf1b11b1f5fc3c861b3d57b2f2006c0db1c6e3c98b37f236f579e5fd5c185e58e5007d480c8c7c7beaf50dcecafae35a69c5c8fe4270768a351c50f4b5357da2c3f2d03b10185f3ccac7af3c2bc7ee4ce89731d331717f0b1026b403ea3820d191043f59ddd206fabfe76189847d2bdbce70d0feff305d1ac13db83d46350754b561e7a506d615a21149c910a3d210bf5132f1fa6aeb10fafc0f6307e7339204cb4b1798c3267cfb57314cbf720410b3767cb1e67489906e83268b76798c5c239cc612312916c1b1b40cef80fefcbd61f4b989b389e83d98e4649eef7dc1bfcb07e3fa4314a5f6f5f4863515a1e1553d3e40cad66b5cf24eb2c7ca41115b8cfdf47d9c08677636c8dad8cf8fa61815aec95b935ae033b1abf094bdcceeae746250f5b5dbb9d508e090b640d84be94252a0ea7d59bcb222c604c23f1a33b8b3b45f30b74eb062b8cc321b349fad64847e91a3dff9fdf65f8bd332413f5894ad9fab501061bd900ceb05ab4be8f57f2b99726a94e28236efab79ae3af1f71df153588d86ec9e836fc6f0dc194437ed5088766b5a9ced1406f63fa3dd191a4e47f3de31bf7eb7dea07622c2b4c035a2c953053de61b7d6d485c35072b8784694715c241bee31788eebc9bbfc179bc3b78da201bb287e99b86b57bc553f570ca6afb08aac93035c1b1add65c89f7e9ca6e79e0c7a6fe892c132296c290e550d8a3fb518885835561416ee994cb4178d7a0ca97745ee3e1ffad9762d6a63844bf9ab6e9010a52c0e7f8939f8dc80bcd06f3bb77f248619741b3a2bebed9e1782ab1b9917b17e684ad43e5860d05be153fb42720752bd448f6901bbfd8dc96b8be9e539aa354d5f6397d7bc92be4333fc4a15f668e1a9b99b0c70265eba8a80054d7109aefb3a16effb2daa1877c05ebda775a19218bc95c140da4e241d0ce79b590137a47a76ab44c51d0bdeee009e1089b2f8a1005f0f037eab09dd7c69ef855745b574496c4ed836708449691b004b0451585933fbe1375a3affa54fd08afc48f2d3b07c1b95dfe3d98fe44d5f6c78189bb2dfaa4341b45bbaebc3a64712b7bcf39c5f8606a2405286b54e38202ea618c1977026ff90de5cfc494740b44ced5fa3d91aaa588faa3b162a35157a53401208f6f73b4943bfd80dcf73e7c46cd8cd1fb9e71365c078e36a728f3d37bc2ce67f0f95c52824376fbf6ad514e171aa13ca9a4bd7e934b7ebf6af38e6883afce6c68ae2dfd3509a7e46d0f86f7d2e2b427f2541c69d371a19057b9a5c3f39243a778fb17486f5390c6b79ce1a2b0bd9f8fd78ad1703c2b15e140c017e17e33fd3422b65a41a46114d82403fe2d399e8fa8467f9a71c281fd23ef5be8bfbb1e24efe6c6ec2719fbdd2fe1b77f8789cdf5039da30c7fde41823b938b149835f5004c059996a3aecd64f57c3cdb5eef450f7468edec785c12bcbcde7170fb9a14f4cfd477ac14ddd76d625d737f6a076c31764f5b36e58782fba26b8455eec87f46af1a5943328e2381582c27f747c76f9ffc293939a3ea55ecaa5639813665103b06b2c34570bf891ab0cd6ab8d9245366c9b9787ee0a7e384e5e58a7992c7eeba6cd41e03a05f92f81621409ac6ac424a845669b87fbe1d013a84fad892c4d8d66f9ee49d7e011424434f1693863c1e43fc38f412fdcd1d96764cc4a1a0b8ef72c6b04db6a5b833bc30a0199cad993cd151cec50b3037dede8fa150e7326dfe40ee0ed59a360a73480088db0491c00ff63589d6798e9518aeb7d16934847364454f1dbf2fd5dcf34f271e"}, 0x723) [ 1119.218975][ T9052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1119.220896][ T9054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1119.258725][ T9052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:59 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0xb, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x80}, @device_b, @from_mac=@device_b, @device_b, {0xe, 0x3}}, {0x7, 0x0, 0x3, 0x0, 0x3}}, {@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x2}, @broadcast, @initial, @initial, {0x6, 0x462}}, {0x7, 0x1, 0x1, 0x1, 0xfe}}}, @random="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"}, 0x723) 06:28:59 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x28}}, 0x20040880) 06:28:59 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) 06:28:59 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:28:59 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(0x0, r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x28}}, 0x20040880) 06:28:59 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) [ 1119.356132][ T9061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:28:59 executing program 0: r0 = gettid() ioprio_get$pid(0x1, r0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) [ 1119.371798][ T9061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1119.391831][ T9064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:29:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(0x0, r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x28}}, 0x20040880) 06:29:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) 06:29:00 executing program 3: keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x1}) add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f0000000480)=@data_frame={@qos_ht={{{@type11={{0x0, 0x2, 0xf, 0x1, 0x1, 0x1, 0x1}, {0xf71}, @broadcast, @device_a, @device_b, {0x1, 0x80}, @broadcast}, {0xe, 0x1}}, {@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x1, 0x1}, {0x2}, @broadcast, @initial, @initial, {0x4, 0x132}}, {0x2, 0x1, 0x2, 0x1, 0x8}}}, @ver_80211n={0x0, 0xfca, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_a, @broadcast, 0xa0, "1ee9e126de6553b20be54112f41cdaee2f6c01f2d58fe735b6da160f1ea8ca218de5626cd34338b0985683cea028be99eab55d66b6ecc84275f32d17df6e16143f266cde90212e267b8efd64ba4feb086179357b37b937b058b7539dd9140d81c5c9cbf482de5632ceec341dbd6148169c3b807aecf00cd88c370656b0b3ec78bf018702270ff9841bf327f6fc2fdb77a16efbe92f1fcccf485e3ca74b045241"}, {@device_b, @device_a, 0x1d, "5b7083b1ba5faf9aaa8c132d6d08a2a766f418b3f9dc2f9b585d95537f"}, {@device_b, @device_b, 0x40, "1937241c0e62afd33fab7474ed78c528fe179d30daa775c6013a6e0d2adcea4d1467bef62e62a6ec00a3b87b815e3b19484777bb0c92ea91c417e1a94082ccf0"}, {@device_b, @broadcast, 0xda, "166600ef63439eeb06789c2b29f552c3d4b4d9a46a9194e79fbd2376a884e24f17e861ec6dd652c5c441fb74931fe20654c4bdaefd58d0f528a6663fc7ccd33502234c694490a2d53f1a96618a62aaeff343b4d70e1ade3e6c84a3568e93936aa1d9b1a0614e831dc4e929344873170ee5155cbcda3af205ce7ce746a543e780278fa6d7ccf9e9c162c679ce03fdb48aabd93df912766b9a6b2195ccdf4e2de6ea4b1c36266d3e40df1036b2e1809fc9a9a8f5d4aff29b2b38b442ce85b5a65bbd0f102409b903149f352645c924e0e094432f14fb93ed627b2c"}, {@device_a, @device_b, 0xae, "5a9176916dc37ffdfaa92d20450787fefef1dcc580e0c9c105363dfb194b0bbe961b5d3dbca0d331da2ed1ce985c95a05bfde59c9af684a9d8e02f1f05c0c93dae0c1d01d0441135db851f92e347a52aa43fb7c12260e830178ba3878e9b9ddbd9f7277af601d93dc678a12b46206d66c4f639b9917d0a637983fb1e7fe9149647eb01e7608fc63d86df3041138a8b456eaa7ac0827cc2ef34e689982d61e5e1ca9bdc853e1a56c4f0506c8568af"}]}, 0x30e) 06:29:00 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:29:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x533, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) [ 1119.644395][ T9081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:29:00 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0xb, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x80}, @device_b, @from_mac=@device_b, @device_b, {0xe, 0x3}}, {0x7, 0x0, 0x3, 0x0, 0x3}}, {@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x2}, @broadcast, @initial, @initial, {0x6, 0x462}}, {0x7, 0x1, 0x1, 0x1, 0xfe}}}, @random="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"}, 0x723) 06:29:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(0x0, r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x28}}, 0x20040880) 06:29:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x533, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) 06:29:00 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:29:00 executing program 0: r0 = gettid() ioprio_get$pid(0x1, r0) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) 06:29:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x28}}, 0x20040880) [ 1119.728278][ T9090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:29:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x533, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) 06:29:00 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1119.797130][ T9095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:29:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x28}}, 0x20040880) 06:29:00 executing program 3: keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x1}) add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) (async) add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f0000000480)=@data_frame={@qos_ht={{{@type11={{0x0, 0x2, 0xf, 0x1, 0x1, 0x1, 0x1}, {0xf71}, @broadcast, @device_a, @device_b, {0x1, 0x80}, @broadcast}, {0xe, 0x1}}, {@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x1, 0x1}, {0x2}, @broadcast, @initial, @initial, {0x4, 0x132}}, {0x2, 0x1, 0x2, 0x1, 0x8}}}, @ver_80211n={0x0, 0xfca, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_a, @broadcast, 0xa0, "1ee9e126de6553b20be54112f41cdaee2f6c01f2d58fe735b6da160f1ea8ca218de5626cd34338b0985683cea028be99eab55d66b6ecc84275f32d17df6e16143f266cde90212e267b8efd64ba4feb086179357b37b937b058b7539dd9140d81c5c9cbf482de5632ceec341dbd6148169c3b807aecf00cd88c370656b0b3ec78bf018702270ff9841bf327f6fc2fdb77a16efbe92f1fcccf485e3ca74b045241"}, {@device_b, @device_a, 0x1d, "5b7083b1ba5faf9aaa8c132d6d08a2a766f418b3f9dc2f9b585d95537f"}, {@device_b, @device_b, 0x40, "1937241c0e62afd33fab7474ed78c528fe179d30daa775c6013a6e0d2adcea4d1467bef62e62a6ec00a3b87b815e3b19484777bb0c92ea91c417e1a94082ccf0"}, {@device_b, @broadcast, 0xda, "166600ef63439eeb06789c2b29f552c3d4b4d9a46a9194e79fbd2376a884e24f17e861ec6dd652c5c441fb74931fe20654c4bdaefd58d0f528a6663fc7ccd33502234c694490a2d53f1a96618a62aaeff343b4d70e1ade3e6c84a3568e93936aa1d9b1a0614e831dc4e929344873170ee5155cbcda3af205ce7ce746a543e780278fa6d7ccf9e9c162c679ce03fdb48aabd93df912766b9a6b2195ccdf4e2de6ea4b1c36266d3e40df1036b2e1809fc9a9a8f5d4aff29b2b38b442ce85b5a65bbd0f102409b903149f352645c924e0e094432f14fb93ed627b2c"}, {@device_a, @device_b, 0xae, "5a9176916dc37ffdfaa92d20450787fefef1dcc580e0c9c105363dfb194b0bbe961b5d3dbca0d331da2ed1ce985c95a05bfde59c9af684a9d8e02f1f05c0c93dae0c1d01d0441135db851f92e347a52aa43fb7c12260e830178ba3878e9b9ddbd9f7277af601d93dc678a12b46206d66c4f639b9917d0a637983fb1e7fe9149647eb01e7608fc63d86df3041138a8b456eaa7ac0827cc2ef34e689982d61e5e1ca9bdc853e1a56c4f0506c8568af"}]}, 0x30e) 06:29:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r2, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) 06:29:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x28}}, 0x20040880) [ 1120.002441][ T9110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1120.253382][ T6003] ================================================================== [ 1120.255131][ T6003] BUG: KASAN: slab-use-after-free in hci_conn_hash_flush+0x90/0x210 [ 1120.257049][ T6003] Read of size 8 at addr ffff0000fb61e000 by task syz-executor.2/6003 [ 1120.258984][ T6003] [ 1120.259487][ T6003] CPU: 0 PID: 6003 Comm: syz-executor.2 Not tainted 6.4.0-rc3-syzkaller-geb0f1697d729 #0 [ 1120.261805][ T6003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 1120.264120][ T6003] Call trace: [ 1120.264927][ T6003] dump_backtrace+0x1b8/0x1e4 [ 1120.266006][ T6003] show_stack+0x2c/0x44 [ 1120.266990][ T6003] dump_stack_lvl+0xd0/0x124 [ 1120.268079][ T6003] print_report+0x174/0x514 [ 1120.269166][ T6003] kasan_report+0xd4/0x130 [ 1120.270236][ T6003] __asan_report_load8_noabort+0x20/0x2c [ 1120.271601][ T6003] hci_conn_hash_flush+0x90/0x210 [ 1120.272834][ T6003] hci_dev_close_sync+0x894/0xf8c [ 1120.273958][ T6003] hci_unregister_dev+0x1cc/0x454 [ 1120.275158][ T6003] vhci_release+0x7c/0xcc [ 1120.276205][ T6003] __fput+0x30c/0x7bc [ 1120.277093][ T6003] ____fput+0x20/0x30 [ 1120.278062][ T6003] task_work_run+0x230/0x2e0 [ 1120.279135][ T6003] do_exit+0x63c/0x1f58 [ 1120.280202][ T6003] do_group_exit+0x194/0x22c [ 1120.281282][ T6003] __wake_up_parent+0x0/0x60 [ 1120.282391][ T6003] invoke_syscall+0x98/0x2c0 [ 1120.283498][ T6003] el0_svc_common+0x138/0x258 [ 1120.284647][ T6003] do_el0_svc+0x64/0x198 [ 1120.285775][ T6003] el0_svc+0x4c/0x15c [ 1120.286712][ T6003] el0t_64_sync_handler+0x84/0xf0 [ 1120.287955][ T6003] el0t_64_sync+0x190/0x194 [ 1120.289067][ T6003] [ 1120.289600][ T6003] Allocated by task 10253: [ 1120.290649][ T6003] kasan_set_track+0x4c/0x7c [ 1120.291748][ T6003] kasan_save_alloc_info+0x24/0x30 [ 1120.292884][ T6003] __kasan_kmalloc+0xac/0xc4 [ 1120.293969][ T6003] kmalloc_trace+0x70/0x88 [ 1120.295003][ T6003] hci_conn_add+0xcc/0x10b4 [ 1120.296102][ T6003] hci_connect_sco+0x94/0x2bc [ 1120.297257][ T6003] sco_sock_connect+0x264/0x860 [ 1120.298478][ T6003] __sys_connect+0x268/0x290 [ 1120.299604][ T6003] __arm64_sys_connect+0x7c/0x94 [ 1120.300748][ T6003] invoke_syscall+0x98/0x2c0 [ 1120.301844][ T6003] el0_svc_common+0x138/0x258 [ 1120.302912][ T6003] do_el0_svc+0x64/0x198 [ 1120.303940][ T6003] el0_svc+0x4c/0x15c [ 1120.304943][ T6003] el0t_64_sync_handler+0x84/0xf0 [ 1120.306155][ T6003] el0t_64_sync+0x190/0x194 [ 1120.307234][ T6003] [ 1120.307807][ T6003] Freed by task 6003: [ 1120.308779][ T6003] kasan_set_track+0x4c/0x7c [ 1120.310038][ T6003] kasan_save_free_info+0x38/0x5c [ 1120.311304][ T6003] ____kasan_slab_free+0x144/0x1c0 [ 1120.312566][ T6003] __kasan_slab_free+0x18/0x28 [ 1120.313638][ T6003] __kmem_cache_free+0x2a8/0x49c [ 1120.314784][ T6003] kfree+0xb8/0x19c [ 1120.315756][ T6003] bt_link_release+0x20/0x30 [ 1120.316852][ T6003] device_release+0x8c/0x1ac [ 1120.317958][ T6003] kobject_put+0x2a8/0x41c [ 1120.319030][ T6003] put_device+0x28/0x40 [ 1120.320060][ T6003] hci_conn_cleanup+0x4fc/0x694 [ 1120.321260][ T6003] hci_conn_del+0x314/0x4b8 [ 1120.322387][ T6003] hci_conn_unlink+0x24c/0x2c4 [ 1120.323560][ T6003] hci_conn_unlink+0x190/0x2c4 [ 1120.324693][ T6003] hci_conn_hash_flush+0x188/0x210 [ 1120.325967][ T6003] hci_dev_close_sync+0x894/0xf8c [ 1120.327122][ T6003] hci_unregister_dev+0x1cc/0x454 [ 1120.328233][ T6003] vhci_release+0x7c/0xcc [ 1120.329239][ T6003] __fput+0x30c/0x7bc [ 1120.330234][ T6003] ____fput+0x20/0x30 [ 1120.331137][ T6003] task_work_run+0x230/0x2e0 [ 1120.332258][ T6003] do_exit+0x63c/0x1f58 [ 1120.333284][ T6003] do_group_exit+0x194/0x22c [ 1120.334327][ T6003] __wake_up_parent+0x0/0x60 [ 1120.335433][ T6003] invoke_syscall+0x98/0x2c0 [ 1120.336547][ T6003] el0_svc_common+0x138/0x258 [ 1120.337646][ T6003] do_el0_svc+0x64/0x198 [ 1120.338664][ T6003] el0_svc+0x4c/0x15c [ 1120.339618][ T6003] el0t_64_sync_handler+0x84/0xf0 [ 1120.340866][ T6003] el0t_64_sync+0x190/0x194 [ 1120.341964][ T6003] [ 1120.342539][ T6003] Last potentially related work creation: [ 1120.343944][ T6003] kasan_save_stack+0x40/0x6c [ 1120.345107][ T6003] __kasan_record_aux_stack+0xcc/0xe8 [ 1120.346400][ T6003] kasan_record_aux_stack_noalloc+0x14/0x20 [ 1120.347848][ T6003] insert_work+0x64/0x384 [ 1120.348935][ T6003] __queue_work+0xd3c/0x1374 [ 1120.350033][ T6003] queue_delayed_work_on+0x1f4/0x2e4 [ 1120.351304][ T6003] hci_conn_drop+0x198/0x2bc [ 1120.352385][ T6003] __sco_sock_close+0x288/0x7b0 [ 1120.353463][ T6003] sco_sock_release+0xb4/0x2c0 [ 1120.354602][ T6003] sock_close+0xb8/0x1fc [ 1120.355683][ T6003] __fput+0x30c/0x7bc [ 1120.356630][ T6003] ____fput+0x20/0x30 [ 1120.357565][ T6003] task_work_run+0x230/0x2e0 [ 1120.358677][ T6003] get_signal+0x13a4/0x159c [ 1120.359769][ T6003] do_notify_resume+0x3cc/0x3c90 [ 1120.360885][ T6003] el0_svc+0x90/0x15c [ 1120.361759][ T6003] el0t_64_sync_handler+0x84/0xf0 [ 1120.362957][ T6003] el0t_64_sync+0x190/0x194 [ 1120.364075][ T6003] [ 1120.364660][ T6003] The buggy address belongs to the object at ffff0000fb61e000 [ 1120.364660][ T6003] which belongs to the cache kmalloc-4k of size 4096 [ 1120.368096][ T6003] The buggy address is located 0 bytes inside of [ 1120.368096][ T6003] freed 4096-byte region [ffff0000fb61e000, ffff0000fb61f000) [ 1120.371357][ T6003] [ 1120.371831][ T6003] The buggy address belongs to the physical page: [ 1120.373458][ T6003] page:0000000041b7d55d refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x13b618 [ 1120.375953][ T6003] head:0000000041b7d55d order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1120.378171][ T6003] anon flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 1120.380351][ T6003] page_type: 0xffffffff() [ 1120.381374][ T6003] raw: 05ffc00000010200 ffff0000c0002a80 0000000000000000 dead000000000001 [ 1120.383434][ T6003] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 1120.385367][ T6003] page dumped because: kasan: bad access detected [ 1120.386870][ T6003] [ 1120.387415][ T6003] Memory state around the buggy address: [ 1120.388669][ T6003] ffff0000fb61df00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1120.390792][ T6003] ffff0000fb61df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1120.392723][ T6003] >ffff0000fb61e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1120.394633][ T6003] ^ [ 1120.395654][ T6003] ffff0000fb61e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1120.397592][ T6003] ffff0000fb61e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1120.399587][ T6003] ================================================================== [ 1120.401638][ C0] vkms_vblank_simulate: vblank timer overrun [ 1120.405253][ T6003] Disabling lock debugging due to kernel taint [ 1120.406596][ T6003] ------------[ cut here ]------------ [ 1120.407819][ T6003] ODEBUG: assert_init not available (active state 0) object: 00000000bd0694eb object type: timer_list hint: hci_conn_timeout+0x0/0x3f4 [ 1120.411243][ T6003] WARNING: CPU: 0 PID: 6003 at lib/debugobjects.c:508 debug_print_object+0x15c/0x1d4 [ 1120.413539][ T6003] Modules linked in: [ 1120.414542][ T6003] CPU: 0 PID: 6003 Comm: syz-executor.2 Tainted: G B 6.4.0-rc3-syzkaller-geb0f1697d729 #0 [ 1120.417364][ T6003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 1120.419820][ T6003] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 1120.421685][ T6003] pc : debug_print_object+0x15c/0x1d4 [ 1120.422971][ T6003] lr : debug_print_object+0x15c/0x1d4 [ 1120.424346][ T6003] sp : ffff80001eeb73f0 [ 1120.425339][ T6003] x29: ffff80001eeb73f0 x28: dfff800000000000 x27: ffff700003dd6e8c [ 1120.427337][ T6003] x26: dfff800000000000 x25: dfff800000000000 x24: ffff0000fb61e2b8 [ 1120.429322][ T6003] x23: ffff800012a719a0 x22: ffff8000115d1618 x21: 0000000000000000 [ 1120.431305][ T6003] x20: ffff8000125bb020 x19: ffff800012a71520 x18: 1fffe000368447be [ 1120.433207][ T6003] x17: 0000000000000000 x16: ffff800012381170 x15: 0000000000000002 [ 1120.435074][ T6003] x14: 0000000000000000 x13: ffffffffffff24e0 x12: 0000000000000001 [ 1120.436959][ T6003] x11: 0000000000000000 x10: 0000000000000000 x9 : 712c77feb99d3d00 [ 1120.438851][ T6003] x8 : 712c77feb99d3d00 x7 : ffffffffffff24e0 x6 : ffffffffffff24b8 [ 1120.440816][ T6003] x5 : ffff80001eeb6cd8 x4 : ffff800015f806b0 x3 : ffff80000835d3ec [ 1120.442731][ T6003] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 1120.444710][ T6003] Call trace: [ 1120.445480][ T6003] debug_print_object+0x15c/0x1d4 [ 1120.446606][ T6003] debug_object_assert_init+0x318/0x3c8 [ 1120.447979][ T6003] __timer_delete+0xac/0x2f8 [ 1120.449054][ T6003] timer_delete+0x24/0x34 [ 1120.450112][ T6003] try_to_grab_pending+0x8c/0x618 [ 1120.451370][ T6003] __cancel_work_timer+0x118/0x540 [ 1120.452594][ T6003] cancel_delayed_work_sync+0x24/0x38 [ 1120.453850][ T6003] hci_conn_del+0x58/0x4b8 [ 1120.455008][ T6003] hci_conn_hash_flush+0x190/0x210 [ 1120.456273][ T6003] hci_dev_close_sync+0x894/0xf8c [ 1120.457526][ T6003] hci_unregister_dev+0x1cc/0x454 [ 1120.458790][ T6003] vhci_release+0x7c/0xcc [ 1120.459900][ T6003] __fput+0x30c/0x7bc [ 1120.460862][ T6003] ____fput+0x20/0x30 [ 1120.461828][ T6003] task_work_run+0x230/0x2e0 [ 1120.462941][ T6003] do_exit+0x63c/0x1f58 [ 1120.463934][ T6003] do_group_exit+0x194/0x22c [ 1120.465016][ T6003] __wake_up_parent+0x0/0x60 [ 1120.466133][ T6003] invoke_syscall+0x98/0x2c0 [ 1120.467256][ T6003] el0_svc_common+0x138/0x258 [ 1120.468407][ T6003] do_el0_svc+0x64/0x198 [ 1120.469545][ T6003] el0_svc+0x4c/0x15c [ 1120.470460][ T6003] el0t_64_sync_handler+0x84/0xf0 [ 1120.471713][ T6003] el0t_64_sync+0x190/0x194 [ 1120.472849][ T6003] irq event stamp: 31330083 [ 1120.473959][ T6003] hardirqs last enabled at (31330083): [] finish_lock_switch+0xbc/0x1e4 [ 1120.476407][ T6003] hardirqs last disabled at (31330082): [] __schedule+0x2b4/0x23b8 [ 1120.478713][ T6003] softirqs last enabled at (31328660): [] __do_softirq+0xac0/0xd54 [ 1120.481068][ T6003] softirqs last disabled at (31328287): [] ____do_softirq+0x14/0x20 [ 1120.483397][ T6003] ---[ end trace 0000000000000000 ]--- [ 1120.484771][ C0] vkms_vblank_simulate: vblank timer overrun [ 1120.486957][ T6003] ------------[ cut here ]------------ [ 1120.488163][ T6003] ODEBUG: assert_init not available (active state 0) object: 000000002ae6c5ab object type: timer_list hint: hci_conn_auto_accept+0x0/0x58 [ 1120.491610][ T6003] WARNING: CPU: 0 PID: 6003 at lib/debugobjects.c:508 debug_print_object+0x15c/0x1d4 [ 1120.493730][ T6003] Modules linked in: [ 1120.494684][ T6003] CPU: 0 PID: 6003 Comm: syz-executor.2 Tainted: G B W 6.4.0-rc3-syzkaller-geb0f1697d729 #0 [ 1120.497433][ T6003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 1120.499867][ T6003] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 1120.501827][ T6003] pc : debug_print_object+0x15c/0x1d4 [ 1120.503167][ T6003] lr : debug_print_object+0x15c/0x1d4 [ 1120.504450][ T6003] sp : ffff80001eeb73f0 [ 1120.505460][ T6003] x29: ffff80001eeb73f0 x28: dfff800000000000 x27: ffff700003dd6e8c [ 1120.507454][ T6003] x26: ffff0000d6c557c0 x25: dfff800000000000 x24: ffff0000fb61e360 [ 1120.509458][ T6003] x23: ffff800012a719a0 x22: ffff8000115d1a0c x21: 0000000000000000 [ 1120.511354][ T6003] x20: ffff8000125bb020 x19: ffff800012a71520 x18: 1fffe000368447be [ 1120.513223][ T6003] x17: 0000000000000000 x16: ffff8000124340b0 x15: 0000000000000002 [ 1120.515115][ T6003] x14: 0000000000000000 x13: ffffffffffff2ef8 x12: 0000000000000001 [ 1120.517037][ T6003] x11: 0000000000000000 x10: 0000000000000000 x9 : 712c77feb99d3d00 [ 1120.518972][ T6003] x8 : 712c77feb99d3d00 x7 : ffffffffffff2ef8 x6 : ffffffffffff2e90 [ 1120.520813][ T6003] x5 : ffff80001eeb6cd8 x4 : ffff800015f80b90 x3 : ffff800008596160 [ 1120.522764][ T6003] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 1120.524710][ T6003] Call trace: [ 1120.525514][ T6003] debug_print_object+0x15c/0x1d4 [ 1120.526689][ T6003] debug_object_assert_init+0x318/0x3c8 [ 1120.527977][ T6003] __timer_delete+0xac/0x2f8 [ 1120.529021][ T6003] timer_delete+0x24/0x34 [ 1120.529960][ T6003] try_to_grab_pending+0x8c/0x618 [ 1120.531199][ T6003] __cancel_work_timer+0x118/0x540 [ 1120.532467][ T6003] cancel_delayed_work_sync+0x24/0x38 [ 1120.533758][ T6003] hci_conn_del+0x60/0x4b8 [ 1120.534855][ T6003] hci_conn_hash_flush+0x190/0x210 [ 1120.535978][ T6003] hci_dev_close_sync+0x894/0xf8c [ 1120.537165][ T6003] hci_unregister_dev+0x1cc/0x454 [ 1120.538420][ T6003] vhci_release+0x7c/0xcc [ 1120.539517][ T6003] __fput+0x30c/0x7bc [ 1120.540583][ T6003] ____fput+0x20/0x30 [ 1120.541562][ T6003] task_work_run+0x230/0x2e0 [ 1120.542708][ T6003] do_exit+0x63c/0x1f58 [ 1120.543721][ T6003] do_group_exit+0x194/0x22c [ 1120.544814][ T6003] __wake_up_parent+0x0/0x60 [ 1120.545952][ T6003] invoke_syscall+0x98/0x2c0 [ 1120.547033][ T6003] el0_svc_common+0x138/0x258 [ 1120.548080][ T6003] do_el0_svc+0x64/0x198 [ 1120.549077][ T6003] el0_svc+0x4c/0x15c [ 1120.550032][ T6003] el0t_64_sync_handler+0x84/0xf0 [ 1120.551248][ T6003] el0t_64_sync+0x190/0x194 [ 1120.552355][ T6003] irq event stamp: 31330083 [ 1120.553483][ T6003] hardirqs last enabled at (31330083): [] finish_lock_switch+0xbc/0x1e4 [ 1120.555879][ T6003] hardirqs last disabled at (31330082): [] __schedule+0x2b4/0x23b8 [ 1120.558163][ T6003] softirqs last enabled at (31328660): [] __do_softirq+0xac0/0xd54 [ 1120.560446][ T6003] softirqs last disabled at (31328287): [] ____do_softirq+0x14/0x20 [ 1120.562734][ T6003] ---[ end trace 0000000000000000 ]--- [ 1120.564065][ C0] vkms_vblank_simulate: vblank timer overrun [ 1120.566537][ T6003] ------------[ cut here ]------------ [ 1120.567757][ T6003] ODEBUG: assert_init not available (active state 0) object: 00000000c5bc84b0 object type: timer_list hint: hci_conn_idle+0x0/0x554 [ 1120.571211][ T6003] WARNING: CPU: 0 PID: 6003 at lib/debugobjects.c:508 debug_print_object+0x15c/0x1d4 [ 1120.573438][ T6003] Modules linked in: [ 1120.574428][ T6003] CPU: 0 PID: 6003 Comm: syz-executor.2 Tainted: G B W 6.4.0-rc3-syzkaller-geb0f1697d729 #0 [ 1120.577193][ T6003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 1120.579682][ T6003] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 1120.581629][ T6003] pc : debug_print_object+0x15c/0x1d4 [ 1120.582838][ T6003] lr : debug_print_object+0x15c/0x1d4 [ 1120.584062][ T6003] sp : ffff80001eeb73f0 [ 1120.585037][ T6003] x29: ffff80001eeb73f0 x28: dfff800000000000 x27: ffff700003dd6e8c [ 1120.587037][ T6003] x26: ffff0000d6c557c0 x25: dfff800000000000 x24: ffff0000fb61e408 [ 1120.588940][ T6003] x23: ffff800012a719a0 x22: ffff8000115d1a64 x21: 0000000000000000 [ 1120.590885][ T6003] x20: ffff8000125bb020 x19: ffff800012a71520 x18: 1fffe000368447be [ 1120.592857][ T6003] x17: 0000000000000000 x16: ffff8000124340b0 x15: 0000000000000002 [ 1120.594780][ T6003] x14: 0000000000000000 x13: ffffffffffff3830 x12: 0000000000000001 [ 1120.596643][ T6003] x11: 0000000000000000 x10: 0000000000000000 x9 : 712c77feb99d3d00 [ 1120.598531][ T6003] x8 : 712c77feb99d3d00 x7 : ffffffffffff3830 x6 : ffffffffffff3810 [ 1120.600409][ T6003] x5 : ffff80001eeb6cd8 x4 : ffff800015f81070 x3 : ffff80000aa946e4 [ 1120.602310][ T6003] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 1120.604326][ T6003] Call trace: [ 1120.605079][ T6003] debug_print_object+0x15c/0x1d4 [ 1120.606300][ T6003] debug_object_assert_init+0x318/0x3c8 [ 1120.607681][ T6003] __timer_delete+0xac/0x2f8 [ 1120.608813][ T6003] timer_delete+0x24/0x34 [ 1120.609857][ T6003] try_to_grab_pending+0x8c/0x618 [ 1120.611032][ T6003] __cancel_work_timer+0x118/0x540 [ 1120.612309][ T6003] cancel_delayed_work_sync+0x24/0x38 [ 1120.613568][ T6003] hci_conn_del+0x68/0x4b8 [ 1120.614649][ T6003] hci_conn_hash_flush+0x190/0x210 [ 1120.615864][ T6003] hci_dev_close_sync+0x894/0xf8c [ 1120.617057][ T6003] hci_unregister_dev+0x1cc/0x454 [ 1120.618309][ T6003] vhci_release+0x7c/0xcc [ 1120.619435][ T6003] __fput+0x30c/0x7bc [ 1120.620440][ T6003] ____fput+0x20/0x30 [ 1120.621386][ T6003] task_work_run+0x230/0x2e0 [ 1120.622489][ T6003] do_exit+0x63c/0x1f58 [ 1120.623493][ T6003] do_group_exit+0x194/0x22c [ 1120.624596][ T6003] __wake_up_parent+0x0/0x60 [ 1120.625713][ T6003] invoke_syscall+0x98/0x2c0 [ 1120.626806][ T6003] el0_svc_common+0x138/0x258 [ 1120.627970][ T6003] do_el0_svc+0x64/0x198 [ 1120.629103][ T6003] el0_svc+0x4c/0x15c [ 1120.629999][ T6003] el0t_64_sync_handler+0x84/0xf0 [ 1120.631156][ T6003] el0t_64_sync+0x190/0x194 [ 1120.632235][ T6003] irq event stamp: 31330083 [ 1120.633242][ T6003] hardirqs last enabled at (31330083): [] finish_lock_switch+0xbc/0x1e4 [ 1120.635545][ T6003] hardirqs last disabled at (31330082): [] __schedule+0x2b4/0x23b8 [ 1120.637829][ T6003] softirqs last enabled at (31328660): [] __do_softirq+0xac0/0xd54 [ 1120.640036][ T6003] softirqs last disabled at (31328287): [] ____do_softirq+0x14/0x20 [ 1120.642247][ T6003] ---[ end trace 0000000000000000 ]--- [ 1120.643568][ C0] vkms_vblank_simulate: vblank timer overrun [ 1120.645571][ T6003] Unable to handle kernel paging request at virtual address e0a2e0db200002ee [ 1120.647689][ T6003] KASAN: maybe wild-memory-access in range [0x051b06d900001770-0x051b06d900001777] [ 1120.649883][ T6003] Mem abort info: [ 1120.650715][ T6003] ESR = 0x0000000096000004 [ 1120.651781][ T6003] EC = 0x25: DABT (current EL), IL = 32 bits [ 1120.653136][ T6003] SET = 0, FnV = 0 [ 1120.654151][ T6003] EA = 0, S1PTW = 0 [ 1120.655085][ T6003] FSC = 0x04: level 0 translation fault [ 1120.656415][ T6003] Data abort info: [ 1120.657310][ T6003] ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000 [ 1120.658798][ T6003] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 1120.660175][ T6003] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 1120.661526][ T6003] [e0a2e0db200002ee] address between user and kernel address ranges [ 1120.663419][ T6003] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP [ 1120.665077][ T6003] Modules linked in: [ 1120.666005][ T6003] CPU: 0 PID: 6003 Comm: syz-executor.2 Tainted: G B W 6.4.0-rc3-syzkaller-geb0f1697d729 #0 [ 1120.668776][ T6003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 1120.671203][ T6003] pstate: 00400005 (nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 1120.673073][ T6003] pc : __list_del_entry_valid+0x78/0x158 [ 1120.674372][ T6003] lr : __list_del_entry_valid+0x4c/0x158 [ 1120.675750][ T6003] sp : ffff80001eeb7820 [ 1120.676712][ T6003] x29: ffff80001eeb7820 x28: dfff800000000000 x27: 1ffff0000311f078 [ 1120.678655][ T6003] x26: ffff0000db2e6000 x25: 1fffe0001f6c3c07 x24: ffff0000f2c10000 [ 1120.680623][ T6003] x23: dfff800000000000 x22: dfff800000000000 x21: 051b06d900001773 [ 1120.682529][ T6003] x20: ffff0000db2e6000 x19: ffff0000fb61e000 x18: 1fffe000368447be [ 1120.684487][ T6003] x17: 0000000000000000 x16: ffff80000850af6c x15: 0000000000000000 [ 1120.686300][ T6003] x14: 0000000000000000 x13: 0000000000000000 x12: ffff60001f6c3c3c [ 1120.687723][ T6003] x11: 0000000000000000 x10: 0000000000000000 x9 : ffff80001a28f310 [ 1120.689261][ T6003] x8 : 00a360db200002ee x7 : 0000000000000000 x6 : ffff80001064feb8 [ 1120.691051][ T6003] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff80000aaeb514 [ 1120.692773][ T6003] x2 : dead000000000122 x1 : 0000000000000008 x0 : 0000000000000000 [ 1120.694476][ T6003] Call trace: [ 1120.695197][ T6003] __list_del_entry_valid+0x78/0x158 [ 1120.696332][ T6003] hci_conn_cleanup+0x14c/0x694 [ 1120.697430][ T6003] hci_conn_del+0x314/0x4b8 [ 1120.698612][ T6003] hci_conn_hash_flush+0x190/0x210 [ 1120.699815][ T6003] hci_dev_close_sync+0x894/0xf8c [ 1120.700890][ T6003] hci_unregister_dev+0x1cc/0x454 [ 1120.702055][ T6003] vhci_release+0x7c/0xcc [ 1120.702976][ T6003] __fput+0x30c/0x7bc [ 1120.703838][ T6003] ____fput+0x20/0x30 [ 1120.704802][ T6003] task_work_run+0x230/0x2e0 [ 1120.705968][ T6003] do_exit+0x63c/0x1f58 [ 1120.706992][ T6003] do_group_exit+0x194/0x22c [ 1120.708102][ T6003] __wake_up_parent+0x0/0x60 [ 1120.709159][ T6003] invoke_syscall+0x98/0x2c0 [ 1120.710223][ T6003] el0_svc_common+0x138/0x258 [ 1120.711410][ T6003] do_el0_svc+0x64/0x198 [ 1120.712442][ T6003] el0_svc+0x4c/0x15c [ 1120.713381][ T6003] el0t_64_sync_handler+0x84/0xf0 [ 1120.714665][ T6003] el0t_64_sync+0x190/0x194 [ 1120.715750][ T6003] Code: 91008902 eb0202bf 54000520 d343fea8 (38766908) [ 1120.717442][ T6003] ---[ end trace 0000000000000000 ]--- [ 1121.441095][ T6003] Kernel panic - not syncing: Oops: Fatal exception [ 1121.442643][ T6003] SMP: stopping secondary CPUs [ 1121.443853][ T6003] Kernel Offset: disabled [ 1121.444894][ T6003] CPU features: 0x000000,40e00804,64017203 [ 1121.446323][ T6003] Memory Limit: none [ 1122.153576][ T6003] Rebooting in 86400 seconds..