Extracting prog: 5m9.969118651s
Minimizing prog: 42m51.253051223s
Simplifying prog options: 1m54.527635028s
Extracting C: 1m17.863550466s
Simplifying C: 22m10.386768188s


18 programs, timeouts [15s 1m40s 6m0s]
extracting reproducer from 18 programs
single: executing 3 programs separately with timeout 15s
testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:3 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$inet_udp-syz_80211_inject_frame-syz_80211_inject_frame-setsockopt$SO_BINDTODEVICE_wg-connect$inet-write$binfmt_script-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-syz_80211_inject_frame-sendmsg$NL80211_CMD_SET_INTERFACE-sendmsg$NL80211_CMD_CONNECT
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="5000000008021100000108021100000050505050505000000000000000000000640000000006"], 0x4e7)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="500000000802110000010802110000005050505050500000000000000000000064000000000601"], 0x4e7)
setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000040)='wg0\x00', 0x4)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
write$binfmt_script(r1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @broadcast}, 0x0, @default, 0x245, @val, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @void, @void}, 0x40)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050002"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0)

program did not crash
testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:3 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-sendmsg$nl_route-socket$can_raw-socket-ioctl$sock_inet_SIOCSIFFLAGS-socketpair-setsockopt$CAN_RAW_FD_FRAMES-socket$nl_generic-syz_genetlink_get_family_id$devlink-socket$nl_route-sendmsg$nl_route-socket$can_raw-socket-ioctl$sock_inet_SIOCSIFFLAGS-socketpair-setsockopt$CAN_RAW_FD_FRAMES-socket$nl_generic-syz_genetlink_get_family_id$devlink
detailed listing:
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001900010000000000000000001d0100000600000000000000ff0020009a902d658a02b3ec0e0000005204256703d3c242cf95a4ffa4f7d386c9950ca8e92075637be38fab1550e7276da74ffbb993c285dd1ceedb2d46b007b279969c68f09d9ab6f760a5ae6fa8599359ee859e96624c323354a631613e942ff05ce0a213feda533e6055", @ANYBLOB="f0811018b0d087a8556c3846a087694fdbf21bb426dd2a3051d945048996d37e69c172df201179da899b173e40ced585840bc409f1ef9e93817e7c2778cf3c750c60f36b27d43596b4d80daca319c80a5d7c64", @ANYBLOB="30ef8d6c0e45882631d54b629e185a49e27a00e13cfba550a1d5bc1db3b80ebc91741aca7b70b2e76eae11a2444b5551762313d3075cd9e31adb1fd3ad93a42fa91d990c5e31152120a7a7921fc4e4adb0b1b36d47a6c5c1da435cb1884eae83dd5c1fd7597be22f7c3e74bc734809752dbdb879ea5155435ce3d2321a9c639e3f586f20c6a5af5ec2d8ad396c8c8a31e26b8bae77e7689a57da8f2c4af297a8719b044a93f7d94ca86da3c788d2f3359acb35c7cc42abea409ddbbd149455b142047bfd9c792ef6ef7cd740541f7126f5d58452837c0a2fdc0caa", @ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0x24040040}, 0x8800)
socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket(0x15, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000004280)={'geneve0\x00'})
socketpair(0x10, 0x3, 0x8, &(0x7f0000000fc0))
setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x70)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001900010000000000000000001d0100000600000000000000ff0020009a902d658a02b3ec0e0000005204256703d3c242cf95a4ffa4f7d386c9950ca8e92075637be38fab1550e7276da74ffbb993c285dd1ceedb2d46b007b279969c68f09d9ab6f760a5ae6fa8599359ee859e96624c323354a631613e942ff05ce0a213feda533e6055", @ANYBLOB="f0811018b0d087a8556c3846a087694fdbf21bb426dd2a3051d945048996d37e69c172df201179da899b173e40ced585840bc409f1ef9e93817e7c2778cf3c750c60f36b27d43596b4d80daca319c80a5d7c64", @ANYBLOB="30ef8d6c0e45882631d54b629e185a49e27a00e13cfba550a1d5bc1db3b80ebc91741aca7b70b2e76eae11a2444b5551762313d3075cd9e31adb1fd3ad93a42fa91d990c5e31152120a7a7921fc4e4adb0b1b36d47a6c5c1da435cb1884eae83dd5c1fd7597be22f7c3e74bc734809752dbdb879ea5155435ce3d2321a9c639e3f586f20c6a5af5ec2d8ad396c8c8a31e26b8bae77e7689a57da8f2c4af297a8719b044a93f7d94ca86da3c788d2f3359acb35c7cc42abea409ddbbd149455b142047bfd9c792ef6ef7cd740541f7126f5d58452837c0a2fdc0caa", @ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0x24040040}, 0x8800) (async)
socket$can_raw(0x1d, 0x3, 0x1) (async)
socket(0x15, 0x5, 0x0) (async)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000004280)={'geneve0\x00'}) (async)
socketpair(0x10, 0x3, 0x8, &(0x7f0000000fc0)) (async)
setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x70) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) (async)

program did not crash
testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:3 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-socket$nl_route-sendmsg$nl_route-socket$nl_xfrm-sendmsg$nl_xfrm-socket$nl_xfrm-sendmsg$nl_xfrm-socket$l2tp6-ioctl$sock_inet6_SIOCADDRT-syz_emit_ethernet-bind$netlink-socket$nl_netfilter-socket$nl_generic-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_SET_INTERFACE-sendmsg$NL80211_CMD_START_AP-syz_80211_inject_frame-socket$nl_generic-ioctl$ifreq_SIOCGIFINDEX_batadv_mesh-socket$nl_sock_diag-sendmsg$SOCK_DESTROY-socket$nl_route-sendmsg$nl_route-sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET-socket$inet6_tcp-ioctl$sock_inet6_tcp_SIOCINQ-socket$inet_smc-bind$inet-connect$inet
detailed listing:
executing program 0:
r0 = socket$netlink(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x38}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0, 0x0, 0x17}, {0x0, 0x0, 0x0, 0x0, 0x92e}}}, 0xb8}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @dev}, @remote, @ipv4})
syz_emit_ethernet(0x3e, &(0x7f0000000500)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b88ef", 0x8, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[], @echo_reply}}}}}, 0x0)
bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000019c0)=ANY=[@ANYBLOB='t\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r8, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100080026006c09000008000c006400000008000d"], 0x74}}, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0), &(0x7f0000000640)=ANY=[@ANYBLOB="80000000ffffffffffff08021100000150505050505000000000000000000000640000e2ff060101"], 0xc7)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000300)={'batadv0\x00', <r10=>0x0})
r11 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DESTROY(r11, &(0x7f0000003380)={0x0, 0x0, &(0x7f0000003340)={&(0x7f0000000100)={0x14, 0x15, 0x1, 0x0, 0x0, {0x3f}}, 0x14}}, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c040000100001000000000000001000000000007c4b75c4980c7217971d8b96f1da0bdf905e85846dc759c23857c5e6bc4f0564d0af94626971513ce2d250774adf6526b06bb13cb0f24b8e19f86a39b89428c35b9cf3414ccd22a22625036db2a2a39782a7367014a8c5d2eb3719deacd929786380937e22c3588b355c80dbffa1eed979f2a15ff1996f6989a878b6375ea76fcee6f2a18c137b18c292e453a55062ef13837df43d00d7310820238221e8c0ccb80a7fa2e8c59691153b886a3e0c639744e9d18ab12041cca683e893eba63e8e", @ANYRES32=r10, @ANYBLOB="00000000000000000a000100aaaaaaaaaabb0000"], 0x2c}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, 0x28}}, 0x0)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r13, 0x541b, &(0x7f0000000080))
r14 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r14, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10)
connect$inet(r14, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)

program did not crash
single: failed to extract reproducer
bisect: bisecting 18 programs with base timeout 15s
testing program (duration=19s, {Threaded:true Repeat:true RepeatTimes:0 Procs:3 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 30, 25, 19, 7, 2, 7, 5, 30, 27, 26, 30, 7, 5, 30, 6, 18, 12]
detailed listing:
executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000018c0)={0x0, 0xfffffffffffffe93, &(0x7f0000000000)={&(0x7f0000000440)={0xfffffdc2, 0x2, 0x3, 0x0, 0x0, 0x0, {0x0, 0x0, 0xffbc}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x25}}]}, 0x1c}}, 0x40088c0)
close(r2)
executing program 2:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001ff01000000000000000000000000000100000000000000000200000000000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000330af70b0b81293500000000000000000000000000000000000000d05bcf7a0000000000000000006b924714000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fc8d0000000000000000000001797660c460732df8bc9f5e2a5d54f1106f15328f45ce3dcb5bf33ad69ae3f750b745d91dfc89f430a92934b4cd98f13a1046"], 0xb8}}, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3}, 0x18)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}, 0x10)
connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3}, 0x18)
writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000f80)="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", 0xdf3}], 0x1)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_sctp(0x2, 0x5, 0x84)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000340)=@assoc_value={<r6=>0x0}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000800)={<r7=>r6, 0x378, "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"}, &(0x7f0000000300)=0x380)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={r7, 0x97fe, 0x6, 0x4}, &(0x7f0000000280)=0x10)
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
syz_80211_inject_frame(&(0x7f0000000440)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="80000000ffffffffffff0802110000005050505050500000000000000000000064000000000602020202020201a1710700000000000000dd8e6930a969de8ce3f558ac53d9a46fc056a85ab1ece80f535fb634973ceb8474cda45a6dc924a2522bff7626afb91a082cd70bacc0b034770717099d5d458b29b8f6a93519773764484a4282d2a73e85b9096f636841b322a99524e50f7b7521ce21d34b1bc2e2f6af44d927197d33bbb3acbfd3c2d012799ae97cef7bf5f6347e6667643c4dbd33e94f2221dda0ed039160dee15a3d114775", @ANYRES32=r8, @ANYBLOB="0b1ae1e3d02fcb1d6a047d765f89"], 0x2a5)
syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r11, @ANYBLOB="0800050003000000616c851592336ca1f89218cc9c2f23ba8f1a845141ba56ee01ee12bd9c3ae73a9771477014fc41d20150c543ab30721147263dc05c46e601a93247e05c524dbc50e487398a1cc31ca6b4cf6c76b49acf8cdfe38743c2cc02326c01074bbf160ecb1202d796af4b41b463136cedf7f38102a35f35839196f9f37e484169d964541a9d3998"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="05000f0000000800e1940000000040000000d402bef8aa05cd91c305a5668fc105eb450975302d2036d63c9bd19bd1eed45bbb82f8f867a165867518af6674097be1dd9dd944ba490bc873e677f55ffee2ffad073af0cf00000000", @ANYRES32=r11, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000000080026006c09000008000c006400000008000d0000000000"], 0x5c}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000240), &(0x7f00000007c0)=@data_frame={@a_msdu=@type01={{}, {}, @device_b, @from_mac=@broadcast, @from_mac=@broadcast}, @a_msdu}, 0x18)
r12 = socket$tipc(0x1e, 0x2, 0x0)
getsockopt$sock_buf(r12, 0x1, 0x1c, 0x0, &(0x7f0000000000))
syz_emit_ethernet(0xa0, &(0x7f0000000380)={@random="e37af103501b", @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x92, 0x0, 0x0, 0x0, 0x32, 0x0, @dev, @local}, "506172d528b8a9e8aca512edc3b9a59ca135d828b2cfb26d6c06d7a458f1cf5c1131b5fe0d3fdd011b92ee0f6b76956b10c55b1917a88b0c332e5e3df1863b1c6451542b7d5d0605b8ae648d1d7cbd8ec5e251bf3a171841bc8c43043f0d1893bf972217829c8f2dc5c35ab2b34a22f8c868d553540768fbee047bb41a59"}}}}, 0x0)
executing program 0:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/112, 0xfffffce3, 0x100, 0x0, 0x21c42fc4)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x0, 0x0, 'sed\x00'}, 0x2c)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0x8010100, @dev}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="b80000001900674c00000000000000000a010100000000000000000000000000ff02000000000000000000000000000100000000000000000a00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/112], 0xb8}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}}}, 0xb8}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, <r5=>0x0}, &(0x7f0000000100)=0xc)
sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r5}}}, 0xb8}}, 0x0)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r6, &(0x7f0000000380)={0xa, 0x0, 0x0, @local, 0xd}, 0x5f)
sendmsg$inet6(r6, &(0x7f0000001480)={&(0x7f0000000040)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="14"], 0x18}, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=<r7=>0x0, &(0x7f0000000240)=0x4)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'syztnl0\x00', r7, 0x29, 0x0, 0x7, 0x2, 0x48, @loopback, @private0, 0x1, 0x7f30, 0x73e5, 0x10}})
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={0x0, <r9=>0x0}, &(0x7f0000000100)=0xc)
sendmsg$nl_xfrm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r9}}}, 0xb8}}, 0x0)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000200)="67a818beb2c030ce59945b", 0xb}, {&(0x7f0000000300), 0x400000}, {0x0}], 0x3)
executing program 1:
socket$inet_icmp(0x2, 0x2, 0x1)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @dev}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000072c0)=[{{&(0x7f0000002d80)={0xa, 0x4e24, 0x2, @mcast2}, 0x1c, &(0x7f0000003140)=[{&(0x7f0000002e00)}, {0x0}, {&(0x7f0000002f00)="c15c3198d6956dbeb8bf461655a076736704206d913194c4898235bdadeafb96759448a7a5fb74a820c5dce919b63e3cf7a7c658190b2f5d3b17851a101cf49b2ec2e715bdc16969ba0e2bfe15aba831805d82c6159b47", 0x57}, {&(0x7f0000003400)="afc2ac0279bedc52c7bcdb2b31a47b0485d910051bd4299b983d534c37550086bb390c6cab1b128e50164da77e5d82e2e1f561cfd0a5ca9f567e448be1e54d21f7143c6cff1b4e148c4616decd601f90240ba5da2553a967432216904aad9d3cb886018e", 0x64}], 0x4}}, {{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000003540)}, {0x0}, {&(0x7f00000035c0)="0d75ab4b67f9bfb735252ed9f1719cadb914a0815848325148278329a1694c2befb9188dad41b733b9bb10bd05c638ce73b0b26cb70339d521c1a527f3333d847b75bc4c41c147b67593257ce60c2750e6405a4730af28717e19f8f4a239b179f54dfe8128dd520e2a17bbf2173314d9ec9381a915d493cfd0cdca6f8a460ce878b65cfe6c19e22f75226b76672d0b6c7e7d6d62213c9597d7753078e459f3875b562087cabcd6981bc41438cee44c127dced5f82a08bc92d928e05493af789f7558e2ceeba4547789d8bb842d1912c6a9dbf7101b228914", 0xd8}, {&(0x7f00000036c0)="60da", 0x2}, {&(0x7f00000037c0)="26f576060e47b87d69e60b4c0a514c2dcbe2623f41e789f3f8b8055f398a9df21fc025f102359e252714740a", 0x2c}, {&(0x7f0000003800)="bb08ad8e8fc1467cf0808d654d6d9114d57b695fa395290b2b8a8912c7c6b6a2057b691376e85db4b7da8124b4e057bada2e82016f0d55c8c3213e076cf16f822edc02f38d69e74579a99dc137a52b42253ff504635ac1b59b13fa108b9f3efcb78ba49c14803f02723d55137a8914fb85ccef0a4249e4636be1f69814827eef276ea30f250526ca20670ab229b0bad71f2b81b8374361b9b0b6e7615679", 0x9e}, {&(0x7f00000038c0)="93b68376dbadabf29032d7c47ff7e3d83c6da2e0622ded4dfb4c1fbf1f122ba81d54581d71cf385bfe3f61e33ddfaf75f836d210b757bd68434b6c2102544e1d2c3fd332aac1909d7ca1169b262c2d1d29ea232699bcad6965e658d4c8e7345d4525363bb1ee1f6458", 0x69}], 0x7, &(0x7f0000003a40)=ANY=[@ANYBLOB="1400000000000000290000004300000004000000000000001400000000000400290000003e0000008000000000000000140000000004000029000000341e000000000000000000002000000000000000290000003600000000000000000000000001001320875f03"], 0x68}}, {{0x0, 0x0, &(0x7f0000005d80)=[{&(0x7f0000004c40)="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", 0x5ee}, {&(0x7f0000005c40)}, {&(0x7f0000005cc0)="fe0bd0bc929e37c333e2772a", 0xc}, {&(0x7f0000005d00)}], 0x4}}, {{&(0x7f0000005e00)={0xa, 0x4e24, 0x4, @mcast1, 0x1ff}, 0x1c, 0x0}}], 0x4, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000), &(0x7f00000000c0)=0x10)
socket$rxrpc(0x21, 0x2, 0xa)
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f00000001c0))
r1 = socket$rds(0x15, 0x5, 0x0)
connect$phonet_pipe(r1, &(0x7f0000000140)={0x23, 0x5b, 0x0, 0x9f}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB='e'], 0x4)
ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f00000002c0)={0x1f, 0x8})
sendmmsg(0xffffffffffffffff, &(0x7f0000003080)=[{{&(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @remote}, 0x0, 0x0, 0x2}}, 0x80, &(0x7f00000028c0)=[{0x0}, {&(0x7f00000005c0)}, {&(0x7f0000000640)}, {&(0x7f0000001800)="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", 0xf78}], 0x4, &(0x7f0000002940)=[{0xe0, 0x3a, 0x7, "cae972bac8b8f6bcfd9315e39436b422a8cfb180183447ad895330fe8dd6bd0e1193d75d287517de1cfebcd9c5b1e2e42df9d760459d41bc675e060c67fd945dd14bbbcc91baa77a110de8412fd8dce113b1d58809e8d43c6aeee24a361e107d4a7493f5b03ecb8b84fa912c7c26b0e963e7c8cc59d167076d3a6cf4baa024319b2f123d00cecf63508530c7a1c16f0ef86e2d465e7badc25ccaa4f62d2a9c10dd31651e06c46c87aeefa1d0c7a9b9ebb1077c2f2a8fdd3b6d7b44e1355de75be981d31b87df64efc5"}], 0xe0}}, {{&(0x7f0000002a40)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x3, 0x0, {0xa, 0x0, 0x0, @private2, 0x7fffffff}}}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000000700)}, {&(0x7f0000002b40)="e6c17eb87d4ae2ceb3bf11b4c947d4da0014da003acf58ecc13f4aca40381175c40ae5c48b6f8e7166c025f93f6c0c694bdb5ded3c37383e74fab19e0a9c64de5cb5d63a6b2f6787663b0716ba70", 0x4e}], 0x2, &(0x7f0000003180)=ANY=[], 0x1c8}}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000002fc0)}], 0x1}}], 0x3, 0x40800)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000002dc0)={'wlan0\x00', 0x4000})
executing program 2:
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000300)={<r1=>0xffffffffffffffff})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}})
socket$inet6(0xa, 0x2, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @private1}})
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ip6_vti0\x00', 0x1})
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000040)={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "412f988666319be3351584801e435e1841141a261cb67b81f1aaab6ac91320d8", 0x3, 0xb0f, 0x7f, 0x3}, 0x3c)
executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0xc, 0x0, "f9d8342d9acacf847459fcff297b11ea84bbc5a556c007d0ca8cb82264e9b925ea043d1f4c4c8fc8aac1ade33c4c1d464c91f739f5789d575bc4511b9f995e18701787e3c3a4a79b5ad5b72b69bbe11c"}, 0xd8) (async)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e21, 0xc0c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x67a}}, 0x0, 0x0, 0x4c, 0x0, "a17260ec7988a742a85fa78f00c6e67623053e33acc4c16cb857cb1c2a544124ec7e68a2ffdab66ebe2cc1dc74e5100722b1eb29a471c13315532372de1a4b8b0e43f78efa8a4eafb73c0a781b700ac7"}, 0xd8)
socket$nl_generic(0x10, 0x3, 0x10) (async)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
executing program 1:
r0 = socket$netlink(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x38}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0, 0x0, 0x17}, {0x0, 0x0, 0x0, 0x0, 0x92e}}}, 0xb8}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @dev}, @remote, @ipv4})
syz_emit_ethernet(0x3e, &(0x7f0000000500)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b88ef", 0x8, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[], @echo_reply}}}}}, 0x0)
bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000019c0)=ANY=[@ANYBLOB='t\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r8, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100080026006c09000008000c006400000008000d"], 0x74}}, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0), &(0x7f0000000640)=ANY=[@ANYBLOB="80000000ffffffffffff08021100000150505050505000000000000000000000640000e2ff060101"], 0xc7)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000300)={'batadv0\x00', <r10=>0x0})
r11 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DESTROY(r11, &(0x7f0000003380)={0x0, 0x0, &(0x7f0000003340)={&(0x7f0000000100)={0x14, 0x15, 0x1, 0x0, 0x0, {0x3f}}, 0x14}}, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c040000100001000000000000001000000000007c4b75c4980c7217971d8b96f1da0bdf905e85846dc759c23857c5e6bc4f0564d0af94626971513ce2d250774adf6526b06bb13cb0f24b8e19f86a39b89428c35b9cf3414ccd22a22625036db2a2a39782a7367014a8c5d2eb3719deacd929786380937e22c3588b355c80dbffa1eed979f2a15ff1996f6989a878b6375ea76fcee6f2a18c137b18c292e453a55062ef13837df43d00d7310820238221e8c0ccb80a7fa2e8c59691153b886a3e0c639744e9d18ab12041cca683e893eba63e8e", @ANYRES32=r10, @ANYBLOB="00000000000000000a000100aaaaaaaaaabb0000"], 0x2c}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, 0x28}}, 0x0)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r13, 0x541b, &(0x7f0000000080))
r14 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r14, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10)
connect$inet(r14, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$rds(0x15, 0x5, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x3000000c})
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="ba5bccbf8cfdb5f2fd99e254685e7c0a9e170d854254942f8af81b66089104828bbbbf5dd514c51caf3287f2f3369bd3159d91639b94547a8fbd6a11c0d8af663d3a9b31d16d5161e2b1377c8883b9f47d7b4d174097e87350067f80880a5dcaa57708175e30e9b5281fefbc07ee08d5e618955fff87976ce1075a5c9aa756013d595001ed27e89fc6024e6d58f7c022ed7d6b8ece223841453325cd5e4c628c02b2a1dba81882d4b670e12b96a1943b0f80bf5e10e8d1ab0e5954b146a1dc386ab3c149604bdb814d0c7c768d381b160c8b50a21b5de07a483b5a604cf71241dfacaddc86d6fca5056970af08200c2696cb8c695c5eb120a1837f5a3a7a954a1ced93d3f7555e39c1f0a6b74833848e233755208b9f47776ded4e612de0fc672396422db5e1247591a7094e807f947dae5eda2097eefc08640824fd256d8cf291989d52acff567bcfb3f932af7a9ce8f4a84620eb4e5d8205bdb320d037e64f86fcd93bdebba0e3a8418730d55907cf9da4b28cc196085cc4a0d38c2b60fa09e54b172769d55ef477249048dfc119971c67d66d1c649147b7c11d6f20201f0096caa9225d7d3fac56e5eba628e99857b510418cb7c0d72eadfe731cf5f5729851c2f618c2aeed2c1bbaa2939e4fa2a785d7f3a2a555124e80142de12cab0d5eb8f3a71ce3352fd35630aa110803cf81ed6e594319e24b4a1e640ce6b9cfd2b6d9f03a01b776ec01921dd6b570d58e5d711609dc9f1ba8be6c1e56573a984297d784792f0747f13cb4cd8689a60495bceb0def4dba9ec6f81881102474bfbbec758e2f03c26684c39e"], 0x404)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x11, @remote, 0x0, 0x3, 'dh\x00'}, 0x2c)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="01e7000000000000000004"], 0x18}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', <r5=>0x0, 0x8, 0x20, 0xfffffffc, 0x10, {{0x6, 0x4, 0x2, 0x37, 0x18, 0x67, 0x0, 0x8, 0x4, 0x0, @multicast2, @loopback, {[@rr={0x7, 0x0, 0x50}]}}}}})
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x1c}}, 0xc000)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0xfffc, @empty}], 0x10)
sendmmsg$inet6(r8, &(0x7f00000000c0)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000080)="8c", 0x1}], 0x1}}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @empty}}}}, &(0x7f00000002c0)=0xb0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={<r9=>0x0}, &(0x7f0000000240)=0x8)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000000080)={r9}, 0x8)
r11 = socket(0x18, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r11, 0x89f4, &(0x7f00000000c0)={'sit0\x00', 0x0})
setsockopt$CAN_RAW_JOIN_FILTERS(r11, 0x65, 0x6, &(0x7f0000000540), 0x4)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000340)={'ip_vti0\x00', r5, 0x0, 0x80, 0x5, 0x80000000, {{0x2a, 0x4, 0x3, 0x7, 0xa8, 0x64, 0x0, 0x1, 0x6, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x30}, {[@timestamp={0x44, 0x8, 0xc, 0x0, 0x5, [0x0]}, @cipso={0x86, 0x58, 0x0, [{0x7, 0xa, "75b5c8e63463c7dc"}, {0x5, 0xd, "f8a6904151b1ffcd3d6968"}, {0x1, 0x2}, {0x5, 0x11, "efd4ab00b10c2d51707c967c5a0bb0"}, {0x0, 0x4, 'J['}, {0x1, 0x12, "6b800357841d59011ea756486f5cb986"}, {0x0, 0x12, "f3372c239d0dfc73f93ebfb30291a251"}]}, @cipso={0x86, 0x30, 0x1, [{0x0, 0xb, "d7c7725e7ee744e050"}, {0x0, 0x12, "8d147629f22602762f4a785710ca89b0"}, {0x0, 0x8, "ae879e6160f8"}, {0x2, 0x5, "dd502e"}]}, @noop]}}}}})
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x15})
executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$rds(0x15, 0x5, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x3000000c})
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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"], 0x404)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x11, @remote, 0x0, 0x3, 'dh\x00'}, 0x2c)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4], 0x18}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', <r5=>0x0, 0x8, 0x20, 0xfffffffc, 0x10, {{0x6, 0x4, 0x2, 0x37, 0x18, 0x67, 0x0, 0x8, 0x4, 0x0, @multicast2, @loopback, {[@rr={0x7, 0x0, 0x50}]}}}}})
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x1c}}, 0xc000)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0xfffc, @empty}], 0x10)
sendmmsg$inet6(r8, &(0x7f00000000c0)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000080)="8c", 0x1}], 0x1}}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @empty}}}}, &(0x7f00000002c0)=0xb0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={<r9=>0x0}, &(0x7f0000000240)=0x8)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000000080)={r9}, 0x8)
r11 = socket(0x18, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r11, 0x89f4, &(0x7f00000000c0)={'sit0\x00', 0x0})
setsockopt$CAN_RAW_JOIN_FILTERS(r11, 0x65, 0x6, &(0x7f0000000540), 0x4)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000340)={'ip_vti0\x00', r5, 0x0, 0x80, 0x5, 0x80000000, {{0x2a, 0x4, 0x3, 0x7, 0xa8, 0x64, 0x0, 0x1, 0x6, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x30}, {[@timestamp={0x44, 0x8, 0xc, 0x0, 0x5, [0x0]}, @cipso={0x86, 0x58, 0x0, [{0x7, 0xa, "75b5c8e63463c7dc"}, {0x5, 0xd, "f8a6904151b1ffcd3d6968"}, {0x1, 0x2}, {0x5, 0x11, "efd4ab00b10c2d51707c967c5a0bb0"}, {0x0, 0x4, 'J['}, {0x1, 0x12, "6b800357841d59011ea756486f5cb986"}, {0x0, 0x12, "f3372c239d0dfc73f93ebfb30291a251"}]}, @cipso={0x86, 0x30, 0x1, [{0x0, 0xb, "d7c7725e7ee744e050"}, {0x0, 0x12, "8d147629f22602762f4a785710ca89b0"}, {0x0, 0x8, "ae879e6160f8"}, {0x2, 0x5, "dd502e"}]}, @noop]}}}}})
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x15})
executing program 1:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480)={'team0\x00', <r1=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000001000)=ANY=[@ANYBLOB="00030000", @ANYRES16=0x0, @ANYBLOB="020027bd7000fedbdf250200000008000100", @ANYRES32=r1, @ANYBLOB="2401028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040047000000080007000000000064000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003400040003000501010000008a59050425000000090001ff01000000810005076900000008003ef800010000090001080100010040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="0400028008000100", @ANYRES32=0x0, @ANYBLOB="ac01028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400f8ffffff40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r1, @ANYBLOB="0800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004009c4500000800", @ANYRES32=r1, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000104000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=r1, @ANYBLOB="40000100240001006c625f74785f68612f375f746f5f706f72745f6d617070696e670000000000000500ffffffffeeff08000400", @ANYRES32=r1, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400a3861132"], 0x300}, 0x1, 0x0, 0x0, 0x20004044}, 0x4000000)
socket$packet(0x11, 0x2, 0x300)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_80211_inject_frame(&(0x7f0000000300), &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x162)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="9f9bf993f2698e138ea35c18f5087b977732c30c749683f1817f6d23f56e9f426790e9f685868ccebd75b0524afd24523d5564d47f799a"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="28070000eb24e9db970000000000000001000000f9ff000000", @ANYRES16=r4, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r5, @ANYBLOB="0a0034000202020202020000"], 0x28}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="05000000000900000000000000000300", @ANYRES32=r8, @ANYBLOB="0800050009000000"], 0x24}, 0x1, 0x0, 0x0, 0xc1}, 0x0)
syz_80211_inject_frame(&(0x7f00000005c0)=@device_b, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x3f6)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r8], 0x40}}, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\b', @ANYRES16=r9, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x68, r9, 0x5, 0x0, 0x80000000, {{}, {@val={0x8}, @val={0xc, 0x99, {0xd9, 0x56}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="05d6515949fd"}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x10, 0x1, 0x1, 0x0, {0xa9e9, 0x8, 0x0, 0x9, 0x0, 0x1, 0x0, 0x3}, 0x1, 0xaaa5, 0xc}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x68}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000740)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random=0x3, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @val={0x4, 0x6, {0x66, 0x9, 0x0, 0x6}}, @void, @val={0x2d, 0x1a, {0x9038, 0x1, 0x1, 0x0, {0xd6, 0xf, 0x0, 0x3, 0x0, 0x1, 0x1}, 0x808, 0x1ff, 0x7}}, @void, @void}, 0x50)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
r10 = socket$key(0xf, 0x3, 0x2)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9801000016003d1d27bd7000000000fdffffffffffffff000080ffffe0000002fe8000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=0x0], 0x1d8}}, 0x0)
sendmsg$key(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x8004)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b000000802110000010802110000e60702110000001000000002000000"], 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
socket(0x2b, 0x1, 0x6)
executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x1c}}, 0x0)
sendmsg$sock(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="5809e2c18b2d8469ba891de5f3413837769066103431cf2ad453aa0c66e486de3e99dc6f0cd4bda746324d202a137317fda67839f22f7441647ba6f8ba5567b789cb86ec325fd4b25b3414db302c29e8131230bad1f24e955a018f5ea298a657b4bfb4f66a813c7a3bfd1bded0b7b7cacddbb7ef6de2f3e5ae874ae31d43129ae7acae70d355278dd0799b9e0a4b454b7b1c1f7cd9443a257a4a369d30b409787470d3", 0xa3}, {&(0x7f0000000100)="2295de17084eaefee90cf0f467c5832dfb9423ec724113f602e823d4dab32a0ba2e166ec17dd6b449a260db1d66b5e58c5b1fc2ad78594ee07b50a5f0e2093d1bc7ebac5759f98634408eca8b333d21595d65db7152c5e6787f179a0bd117006f8fd4dbb08dd499022f324d54f9716db024c99a4a5b9763d5d0430434598e8f8326261ea0adea758c7a881cd21aaf0af828f9872294cef1d3de47ec09e8b1e3e55210ed987872f04944dd87e01956465afc42c66522ce53113d16e76a96465f7d63cbe999c8abe53d3b9729f0ab9c97706e8b527d830f9cf841a1a6f6560cd4f474cb8e60f7faa7b404ae96067b2d7477637d6e6", 0xf4}], 0x2, &(0x7f00000002c0)=[@txtime={{0x18, 0x1, 0x3d, 0x321}}], 0x18}, 0x4008001)
socket$alg(0x26, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000340)=0x1f, 0x4)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1)
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000003d40)={0x0, 0x0, &(0x7f0000003cc0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000031000100000000000000000001"], 0x14}], 0x1, 0x0, 0x0, 0x4c000}, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0xc, 0x0, "f9d8342d9acacf847459d569297b11ea84bbc5a556c06ad0caa6b82266e9b925ea043d1f4c4c8fc8aac1ade33c4c1d464c91f739f5789d575bc4511b9f990848ae4487e3c3a4b79b5ad5b72b69bbe11c"}, 0xd8)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e9c7af", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
executing program 1:
r0 = socket$netlink(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x38}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0, 0x0, 0x17}, {0x0, 0x0, 0x0, 0x0, 0x92e}}}, 0xb8}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @dev}, @remote, @ipv4})
syz_emit_ethernet(0x3e, &(0x7f0000000500)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b88ef", 0x8, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[], @echo_reply}}}}}, 0x0)
bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000019c0)=ANY=[@ANYBLOB='t\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r8, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100080026006c09000008000c006400000008000d"], 0x74}}, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0), &(0x7f0000000640)=ANY=[@ANYBLOB="80000000ffffffffffff08021100000150505050505000000000000000000000640000e2ff060101"], 0xc7)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000300)={'batadv0\x00', <r10=>0x0})
r11 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DESTROY(r11, &(0x7f0000003380)={0x0, 0x0, &(0x7f0000003340)={&(0x7f0000000100)={0x14, 0x15, 0x1, 0x0, 0x0, {0x3f}}, 0x14}}, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c040000100001000000000000001000000000007c4b75c4980c7217971d8b96f1da0bdf905e85846dc759c23857c5e6bc4f0564d0af94626971513ce2d250774adf6526b06bb13cb0f24b8e19f86a39b89428c35b9cf3414ccd22a22625036db2a2a39782a7367014a8c5d2eb3719deacd929786380937e22c3588b355c80dbffa1eed979f2a15ff1996f6989a878b6375ea76fcee6f2a18c137b18c292e453a55062ef13837df43d00d7310820238221e8c0ccb80a7fa2e8c59691153b886a3e0c639744e9d18ab12041cca683e893eba63e8e", @ANYRES32=r10, @ANYBLOB="00000000000000000a000100aaaaaaaaaabb0000"], 0x2c}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, 0x28}}, 0x0)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r13, 0x541b, &(0x7f0000000080))
r14 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r14, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10)
connect$inet(r14, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
executing program 0:
unshare(0x20000400)
r0 = socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2000)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000040)=0x80, 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24010000100001000000000000000000ac1414aa000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000000003c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e00fc0200000000000000000000000000010c0015"], 0x124}}, 0x0)
executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001900010000000000000000001d0100000600000000000000ff0020009a902d658a02b3ec0e0000005204256703d3c242cf95a4ffa4f7d386c9950ca8e92075637be38fab1550e7276da74ffbb993c285dd1ceedb2d46b007b279969c68f09d9ab6f760a5ae6fa8599359ee859e96624c323354a631613e942ff05ce0a213feda533e6055", @ANYBLOB="f0811018b0d087a8556c3846a087694fdbf21bb426dd2a3051d945048996d37e69c172df201179da899b173e40ced585840bc409f1ef9e93817e7c2778cf3c750c60f36b27d43596b4d80daca319c80a5d7c64", @ANYBLOB="30ef8d6c0e45882631d54b629e185a49e27a00e13cfba550a1d5bc1db3b80ebc91741aca7b70b2e76eae11a2444b5551762313d3075cd9e31adb1fd3ad93a42fa91d990c5e31152120a7a7921fc4e4adb0b1b36d47a6c5c1da435cb1884eae83dd5c1fd7597be22f7c3e74bc734809752dbdb879ea5155435ce3d2321a9c639e3f586f20c6a5af5ec2d8ad396c8c8a31e26b8bae77e7689a57da8f2c4af297a8719b044a93f7d94ca86da3c788d2f3359acb35c7cc42abea409ddbbd149455b142047bfd9c792ef6ef7cd740541f7126f5d58452837c0a2fdc0caa", @ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0x24040040}, 0x8800)
socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket(0x15, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000004280)={'geneve0\x00'})
socketpair(0x10, 0x3, 0x8, &(0x7f0000000fc0))
setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x70)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001900010000000000000000001d0100000600000000000000ff0020009a902d658a02b3ec0e0000005204256703d3c242cf95a4ffa4f7d386c9950ca8e92075637be38fab1550e7276da74ffbb993c285dd1ceedb2d46b007b279969c68f09d9ab6f760a5ae6fa8599359ee859e96624c323354a631613e942ff05ce0a213feda533e6055", @ANYBLOB="f0811018b0d087a8556c3846a087694fdbf21bb426dd2a3051d945048996d37e69c172df201179da899b173e40ced585840bc409f1ef9e93817e7c2778cf3c750c60f36b27d43596b4d80daca319c80a5d7c64", @ANYBLOB="30ef8d6c0e45882631d54b629e185a49e27a00e13cfba550a1d5bc1db3b80ebc91741aca7b70b2e76eae11a2444b5551762313d3075cd9e31adb1fd3ad93a42fa91d990c5e31152120a7a7921fc4e4adb0b1b36d47a6c5c1da435cb1884eae83dd5c1fd7597be22f7c3e74bc734809752dbdb879ea5155435ce3d2321a9c639e3f586f20c6a5af5ec2d8ad396c8c8a31e26b8bae77e7689a57da8f2c4af297a8719b044a93f7d94ca86da3c788d2f3359acb35c7cc42abea409ddbbd149455b142047bfd9c792ef6ef7cd740541f7126f5d58452837c0a2fdc0caa", @ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0x24040040}, 0x8800) (async)
socket$can_raw(0x1d, 0x3, 0x1) (async)
socket(0x15, 0x5, 0x0) (async)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000004280)={'geneve0\x00'}) (async)
socketpair(0x10, 0x3, 0x8, &(0x7f0000000fc0)) (async)
setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x70) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) (async)
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="5000000008021100000108021100000050505050505000000000000000000000640000000006"], 0x4e7)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="500000000802110000010802110000005050505050500000000000000000000064000000000601"], 0x4e7)
setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000040)='wg0\x00', 0x4)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
write$binfmt_script(r1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @broadcast}, 0x0, @default, 0x245, @val, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @void, @void}, 0x40)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050002"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 3 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:3 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$inet_udp-syz_80211_inject_frame-syz_80211_inject_frame-setsockopt$SO_BINDTODEVICE_wg-connect$inet-write$binfmt_script-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-syz_80211_inject_frame-sendmsg$NL80211_CMD_SET_INTERFACE-sendmsg$NL80211_CMD_CONNECT
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="5000000008021100000108021100000050505050505000000000000000000000640000000006"], 0x4e7)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="500000000802110000010802110000005050505050500000000000000000000064000000000601"], 0x4e7)
setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000040)='wg0\x00', 0x4)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
write$binfmt_script(r1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @broadcast}, 0x0, @default, 0x245, @val, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @void, @void}, 0x40)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050002"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0)

program crashed: WARNING in __cfg80211_bss_update
single: successfully extracted reproducer
found reproducer with 12 syscalls
minimizing guilty program
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:3 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$inet_udp-syz_80211_inject_frame-syz_80211_inject_frame-setsockopt$SO_BINDTODEVICE_wg-connect$inet-write$binfmt_script-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-syz_80211_inject_frame-sendmsg$NL80211_CMD_SET_INTERFACE
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="5000000008021100000108021100000050505050505000000000000000000000640000000006"], 0x4e7)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="500000000802110000010802110000005050505050500000000000000000000064000000000601"], 0x4e7)
setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000040)='wg0\x00', 0x4)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
write$binfmt_script(r1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @broadcast}, 0x0, @default, 0x245, @val, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @void, @void}, 0x40)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050002"], 0x24}}, 0x0)

program crashed: WARNING in __cfg80211_bss_update
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:3 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$inet_udp-syz_80211_inject_frame-syz_80211_inject_frame-setsockopt$SO_BINDTODEVICE_wg-connect$inet-write$binfmt_script-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-syz_80211_inject_frame
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="5000000008021100000108021100000050505050505000000000000000000000640000000006"], 0x4e7)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="500000000802110000010802110000005050505050500000000000000000000064000000000601"], 0x4e7)
setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000040)='wg0\x00', 0x4)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
write$binfmt_script(r1, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @broadcast}, 0x0, @default, 0x245, @val, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @void, @void}, 0x40)

program crashed: WARNING in __cfg80211_bss_update
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:3 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$inet_udp-syz_80211_inject_frame-syz_80211_inject_frame-setsockopt$SO_BINDTODEVICE_wg-connect$inet-write$binfmt_script-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211
detailed listing:
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="5000000008021100000108021100000050505050505000000000000000000000640000000006"], 0x4e7)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="500000000802110000010802110000005050505050500000000000000000000064000000000601"], 0x4e7)
setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000040)='wg0\x00', 0x4)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
write$binfmt_script(r1, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:3 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$inet_udp-syz_80211_inject_frame-syz_80211_inject_frame-setsockopt$SO_BINDTODEVICE_wg-connect$inet-write$binfmt_script-syz_genetlink_get_family_id$nl80211-syz_80211_inject_frame
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="5000000008021100000108021100000050505050505000000000000000000000640000000006"], 0x4e7)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="500000000802110000010802110000005050505050500000000000000000000064000000000601"], 0x4e7)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000040)='wg0\x00', 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
write$binfmt_script(r0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @broadcast}, 0x0, @default, 0x245, @val, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @void, @void}, 0x40)

program crashed: WARNING in __cfg80211_bss_update
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:3 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$inet_udp-syz_80211_inject_frame-syz_80211_inject_frame-setsockopt$SO_BINDTODEVICE_wg-connect$inet-write$binfmt_script-syz_80211_inject_frame
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="5000000008021100000108021100000050505050505000000000000000000000640000000006"], 0x4e7)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="500000000802110000010802110000005050505050500000000000000000000064000000000601"], 0x4e7)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000040)='wg0\x00', 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
write$binfmt_script(r0, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @broadcast}, 0x0, @default, 0x245, @val, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @void, @void}, 0x40)

program crashed: WARNING in __cfg80211_bss_update
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:3 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$inet_udp-syz_80211_inject_frame-syz_80211_inject_frame-setsockopt$SO_BINDTODEVICE_wg-connect$inet-syz_80211_inject_frame
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="5000000008021100000108021100000050505050505000000000000000000000640000000006"], 0x4e7)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="500000000802110000010802110000005050505050500000000000000000000064000000000601"], 0x4e7)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000040)='wg0\x00', 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @broadcast}, 0x0, @default, 0x245, @val, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @void, @void}, 0x40)

program crashed: WARNING in __cfg80211_bss_update
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:3 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$inet_udp-syz_80211_inject_frame-syz_80211_inject_frame-setsockopt$SO_BINDTODEVICE_wg-syz_80211_inject_frame
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="5000000008021100000108021100000050505050505000000000000000000000640000000006"], 0x4e7)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="500000000802110000010802110000005050505050500000000000000000000064000000000601"], 0x4e7)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000040)='wg0\x00', 0x4)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @broadcast}, 0x0, @default, 0x245, @val, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @void, @void}, 0x40)

program crashed: WARNING in __cfg80211_bss_update
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:3 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$inet_udp-syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="5000000008021100000108021100000050505050505000000000000000000000640000000006"], 0x4e7)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="500000000802110000010802110000005050505050500000000000000000000064000000000601"], 0x4e7)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @broadcast}, 0x0, @default, 0x245, @val, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @void, @void}, 0x40)

program crashed: WARNING in __cfg80211_bss_update
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:3 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$inet_udp-syz_80211_inject_frame-syz_80211_inject_frame
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="5000000008021100000108021100000050505050505000000000000000000000640000000006"], 0x4e7)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @broadcast}, 0x0, @default, 0x245, @val, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @void, @void}, 0x40)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:3 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$inet_udp-syz_80211_inject_frame-syz_80211_inject_frame
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="500000000802110000010802110000005050505050500000000000000000000064000000000601"], 0x4e7)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @broadcast}, 0x0, @default, 0x245, @val, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @void, @void}, 0x40)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:3 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="5000000008021100000108021100000050505050505000000000000000000000640000000006"], 0x4e7)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="500000000802110000010802110000005050505050500000000000000000000064000000000601"], 0x4e7)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @broadcast}, 0x0, @default, 0x245, @val, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @void, @void}, 0x40)

program crashed: WARNING in __cfg80211_bss_update
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:3 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame
detailed listing:
executing program 0:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="5000000008021100000108021100000050505050505000000000000000000000640000000006"], 0x4e7)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="500000000802110000010802110000005050505050500000000000000000000064000000000601"], 0x4e7)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @broadcast}, 0x0, @default, 0x245, @val, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @void, @void}, 0x40)

program crashed: WARNING in __cfg80211_bss_update
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:3 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame
detailed listing:
executing program 0:
syz_80211_inject_frame(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="5000000008021100000108021100000050505050505000000000000000000000640000000006"], 0x4e7)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="500000000802110000010802110000005050505050500000000000000000000064000000000601"], 0x4e7)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @broadcast}, 0x0, @default, 0x245, @val, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @void, @void}, 0x40)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:3 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame
detailed listing:
executing program 0:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x4e7)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="500000000802110000010802110000005050505050500000000000000000000064000000000601"], 0x4e7)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @broadcast}, 0x0, @default, 0x245, @val, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @void, @void}, 0x40)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:3 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame
detailed listing:
executing program 0:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB], 0x4e7)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="500000000802110000010802110000005050505050500000000000000000000064000000000601"], 0x4e7)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @broadcast}, 0x0, @default, 0x245, @val, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @void, @void}, 0x40)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:3 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame
detailed listing:
executing program 0:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="5000000008021100000108021100000050505050505000000000000000000000640000000006"], 0x4e7)
syz_80211_inject_frame(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="500000000802110000010802110000005050505050500000000000000000000064000000000601"], 0x4e7)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @broadcast}, 0x0, @default, 0x245, @val, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @void, @void}, 0x40)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:3 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame
detailed listing:
executing program 0:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="5000000008021100000108021100000050505050505000000000000000000000640000000006"], 0x4e7)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x4e7)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @broadcast}, 0x0, @default, 0x245, @val, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @void, @void}, 0x40)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:3 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame
detailed listing:
executing program 0:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="5000000008021100000108021100000050505050505000000000000000000000640000000006"], 0x4e7)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB], 0x4e7)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @broadcast}, 0x0, @default, 0x245, @val, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @void, @void}, 0x40)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:3 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame
detailed listing:
executing program 0:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="5000000008021100000108021100000050505050505000000000000000000000640000000006"], 0x4e7)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="500000000802110000010802110000005050505050500000000000000000000064000000000601"], 0x4e7)
syz_80211_inject_frame(0x0, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @broadcast}, 0x0, @default, 0x245, @val, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @void, @void}, 0x40)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:3 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame
detailed listing:
executing program 0:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="5000000008021100000108021100000050505050505000000000000000000000640000000006"], 0x4e7)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="500000000802110000010802110000005050505050500000000000000000000064000000000601"], 0x4e7)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:3 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame
program did not crash
simplifying guilty program options
testing program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:3 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame
detailed listing:
executing program 0:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="5000000008021100000108021100000050505050505000000000000000000000640000000006"], 0x4e7)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="500000000802110000010802110000005050505050500000000000000000000064000000000601"], 0x4e7)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @broadcast}, 0x0, @default, 0x245, @val, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @void, @void}, 0x40)

program crashed: WARNING in __cfg80211_bss_update
extracting C reproducer
testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:3 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame
program crashed: WARNING in __cfg80211_bss_update
simplifying C reproducer
testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame
program crashed: WARNING in __cfg80211_bss_update
testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame
program did not crash
testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame
program crashed: WARNING in __cfg80211_bss_update
testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame
program crashed: WARNING in __cfg80211_bss_update
testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame
program crashed: WARNING in __cfg80211_bss_update
testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame
program crashed: WARNING in __cfg80211_bss_update
testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame
program crashed: WARNING in __cfg80211_bss_update
testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame
program crashed: WARNING in __cfg80211_bss_update
testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame
program crashed: WARNING in __cfg80211_bss_update
testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame
program did not crash
testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame
program crashed: WARNING in __cfg80211_bss_update
testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame
program crashed: WARNING in __cfg80211_bss_update
testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame
program crashed: WARNING in __cfg80211_bss_update
testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:false Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame
program crashed: WARNING in __cfg80211_bss_update
testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame
program crashed: WARNING in __cfg80211_bss_update
reproducing took 1h16m15.019788301s
repro crashed as (corrupted=false):
------------[ cut here ]------------
WARNING: CPU: 0 PID: 16 at net/wireless/scan.c:1743 cfg80211_combine_bsses net/wireless/scan.c:1743 [inline]
WARNING: CPU: 0 PID: 16 at net/wireless/scan.c:1743 __cfg80211_bss_update+0x1b4a/0x2170 net/wireless/scan.c:1983
Modules linked in:
CPU: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.10.0-rc6-syzkaller-01414-g58f9416d413a #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
RIP: 0010:cfg80211_combine_bsses net/wireless/scan.c:1743 [inline]
RIP: 0010:__cfg80211_bss_update+0x1b4a/0x2170 net/wireless/scan.c:1983
Code: e1 07 fe c1 38 c1 0f 8c 44 fb ff ff 48 8b 7c 24 70 e8 ba 04 24 f7 e9 35 fb ff ff e8 80 e6 bd f6 90 0f 0b 90 e9 bb fb ff ff 90 <0f> 0b 90 48 89 ef e8 7b 9a de f9 84 c0 0f 84 9f 00 00 00 e8 5e e6
RSP: 0018:ffffc90000156db8 EFLAGS: 00010206
RAX: ffff888020fad410 RBX: ffff88802d150010 RCX: dffffc0000000000
RDX: ffff8880172cda00 RSI: 0000000000000000 RDI: 0000000000000006
RBP: ffff888020fad010 R08: ffffffff8ad83d6b R09: 0245006400000000
R10: 0000505050505050 R11: 0003000000000000 R12: ffff888020fad000
R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88802d150000
FS:  0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020001207 CR3: 000000000e132000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 cfg80211_inform_single_bss_data+0xd51/0x2030 net/wireless/scan.c:2331
 cfg80211_inform_bss_data+0x3dd/0x5a70 net/wireless/scan.c:3159
 cfg80211_inform_bss_frame_data+0x3bc/0x720 net/wireless/scan.c:3249
 ieee80211_bss_info_update+0x8a7/0xbc0 net/mac80211/scan.c:226
 ieee80211_scan_rx+0x526/0x9c0 net/mac80211/scan.c:340
 __ieee80211_rx_handle_packet net/mac80211/rx.c:5223 [inline]
 ieee80211_rx_list+0x2b02/0x3780 net/mac80211/rx.c:5460
 ieee80211_rx_napi+0x18a/0x3c0 net/mac80211/rx.c:5483
 ieee80211_rx include/net/mac80211.h:5132 [inline]
 ieee80211_handle_queued_frames+0xe7/0x1e0 net/mac80211/main.c:439
 tasklet_action_common+0x321/0x4d0 kernel/softirq.c:785
 handle_softirqs+0x2c4/0x970 kernel/softirq.c:554
 run_ksoftirqd+0xca/0x130 kernel/softirq.c:928
 smpboot_thread_fn+0x544/0xa30 kernel/smpboot.c:164
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>

final repro crashed as (corrupted=false):
------------[ cut here ]------------
WARNING: CPU: 0 PID: 16 at net/wireless/scan.c:1743 cfg80211_combine_bsses net/wireless/scan.c:1743 [inline]
WARNING: CPU: 0 PID: 16 at net/wireless/scan.c:1743 __cfg80211_bss_update+0x1b4a/0x2170 net/wireless/scan.c:1983
Modules linked in:
CPU: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.10.0-rc6-syzkaller-01414-g58f9416d413a #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
RIP: 0010:cfg80211_combine_bsses net/wireless/scan.c:1743 [inline]
RIP: 0010:__cfg80211_bss_update+0x1b4a/0x2170 net/wireless/scan.c:1983
Code: e1 07 fe c1 38 c1 0f 8c 44 fb ff ff 48 8b 7c 24 70 e8 ba 04 24 f7 e9 35 fb ff ff e8 80 e6 bd f6 90 0f 0b 90 e9 bb fb ff ff 90 <0f> 0b 90 48 89 ef e8 7b 9a de f9 84 c0 0f 84 9f 00 00 00 e8 5e e6
RSP: 0018:ffffc90000156db8 EFLAGS: 00010206
RAX: ffff888020fad410 RBX: ffff88802d150010 RCX: dffffc0000000000
RDX: ffff8880172cda00 RSI: 0000000000000000 RDI: 0000000000000006
RBP: ffff888020fad010 R08: ffffffff8ad83d6b R09: 0245006400000000
R10: 0000505050505050 R11: 0003000000000000 R12: ffff888020fad000
R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88802d150000
FS:  0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020001207 CR3: 000000000e132000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 cfg80211_inform_single_bss_data+0xd51/0x2030 net/wireless/scan.c:2331
 cfg80211_inform_bss_data+0x3dd/0x5a70 net/wireless/scan.c:3159
 cfg80211_inform_bss_frame_data+0x3bc/0x720 net/wireless/scan.c:3249
 ieee80211_bss_info_update+0x8a7/0xbc0 net/mac80211/scan.c:226
 ieee80211_scan_rx+0x526/0x9c0 net/mac80211/scan.c:340
 __ieee80211_rx_handle_packet net/mac80211/rx.c:5223 [inline]
 ieee80211_rx_list+0x2b02/0x3780 net/mac80211/rx.c:5460
 ieee80211_rx_napi+0x18a/0x3c0 net/mac80211/rx.c:5483
 ieee80211_rx include/net/mac80211.h:5132 [inline]
 ieee80211_handle_queued_frames+0xe7/0x1e0 net/mac80211/main.c:439
 tasklet_action_common+0x321/0x4d0 kernel/softirq.c:785
 handle_softirqs+0x2c4/0x970 kernel/softirq.c:554
 run_ksoftirqd+0xca/0x130 kernel/softirq.c:928
 smpboot_thread_fn+0x544/0xa30 kernel/smpboot.c:164
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>