ommon=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0xd203}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:29 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x3e000000}]}, 0x78)

02:42:29 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xf, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x60}}, 0x0)
ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000000)=0x9)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') (async, rerun: 32)
mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async, rerun: 32)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f00000002c0)='./file0/file0\x00', 0x0)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') (async)
renameat2(r2, &(0x7f0000001680)='./file0/file0\x00', r1, &(0x7f00000016c0)='./file0\x00', 0x0) (async)
writev(r1, &(0x7f00000017c0)=[{&(0x7f00000001c0)="5fd485bf7d4b67a90a4d9fced1ae6a3a600e805a11da8d0bb53fc8db68c2316879e570eee8841bc4e4d1202d22423d233147ce1c6ef061bc4c1f49a1fa8d427fc8109573434a76efb19e284490a38d93f72bcdc882e9047b51a6bfc743b26d2a49aabac70e333eab7bd2df8bdfd4c282643333598151e8671d30e6e143f83bed6492815e57b8fb6749b1c5d32976e9801910656865995e43d18d7d3d6cd37109b54157adeb80a8caa9f1881fe304b5992e854302e94b7a3f36478becafc25ed0157fe078de9a0a9a5f2d33ebf4c39c65e275b9e3", 0xd4}, {&(0x7f00000002c0)="ede923bdb18c7532dd254b0bd494e65e9e93a377010375cbacd7b1b7b2b915a7272e5e262b04b9e1d9e82c7d153020b0b89af59cc0059f441b2787350630312a8fc8741468c58a9b4786285cd65690a2424cb8bdd5c26a0cb08f2e5008a4ea195461d8b7fd028a9a6d79cd7da3341016f28c75cf73e59296dbef6161c9dad52962d7fd26466ab813c77a09bfc642b5ed4da3cc45c41072300e39014b", 0x9c}, {&(0x7f0000000380)="815cc30bab8d5c53a659e1ea8cf08157e9aee4467def8d4f38e74a181ee93e62ec9871aec504ea7dd4b9aff73a7a0c64bfa7eb49f5c56f729029549a894c520d026c289b9e7ea19d7f7b09a3", 0x4c}, {&(0x7f0000000400)="22d0b99f2a722a2fe60d643eeb22b85b3a2deef59b5ad8953d13b7e3faefe9f8b6a9acc70a48e171c9da4c5e6c5bda11e074b2d86148749f6f812103ac10e7e870fa03d3d7", 0x45}, {&(0x7f0000000480)="1cc685f01baf54f3b77e9146b46121f2fbb577ee443c25d7b0ec8bdf6866ea6caf8b342eef6146b28b5e8e1ac6a4be6e60d5719a6dbda4358cccbf184b8dcd5f25", 0x41}, {&(0x7f0000000500)="e8d242fb7452b854b8f041275666f5af7521de14427e34af77ccf7f5d4f274d5fb63d1a1d0c0a38d6ca8ad8741dbaaf4a9f0337a8210662de339cdcf9a77d8a0b007fbe1e21435ce2de7787dcfcf00f7df8b6134b5519d3799f356a87710cbe47cbfbc6410e0114dab103878dc9dd9d40f61988091b87d3f08277e53631fe4ae3dfd01232e89eeea850cb6226ad472f6bf4a797056a277a0ba6f834f7ebe2cc84863548357fa7b394447b4b5e3d2908eb519465abaaa1da460812b795408afa647affa3363af314a5ec449709fecdb04d1938deffe52debe799f", 0xda}, {&(0x7f0000000600)="6097eca728838a749dd5af9c1af35f9f8cb18039c4f52c102af23191c8a7343a0cad22511f77b9ddb3fb1d3f76928641fe39d757fd0363ac2dedadf179f5e06b718e7de57c510f3fd147a8c4df9182901c789c32d1ba6243120d5b4b426a1893f16bd844b2941d94d7723ee4e13b586a08f0a61e543b0bf8d4a0ab9da1cd0a13abbe6258a866365d17299b5de05e0ebb3f8bd4a4430172525d84dd926f20aba9ebd6db1f05c8e401ed7b89ea9584d1fabc00cf3b2e7e590cdc6e34687599055b511e8a15a989db5def132566bf590023376d2302c26fb942fee6c42e0ab627450d272b18016b535c27d3b943df23c9f9d012532619f41c041c4f5cbd89f4307d042bc7268aeec81ded477919523593f8474392db90213a332064dff87d8bbc3aebeb1ddb14d6d5a1c3025479066716b55b1059333908e7b3e086d3b7edb7af4dc6ef5487acf1bbe13e73a10f126bf096e25fd2b90a5301fccbb0af0fae4b400ec44a68fd798345c0d22dd30009b0cbed048bd896e8e720ea53efbdccb14060a815e3d9786050af5eb129599bdfc82371085b338336bda8b591c6a06755d533012f15863875e5d133f5ebf08640f6628653df80cb52804bf5681a5fc2b8651f49d25cb1d63610606d42aa9b1ce0f269d45b49fe1677de3e2dfa26ac19bc67d111ef1ceae2bf277f99534c91d5678293c41ee2368db082fc0bda66dbe1c13386e8dd7f4f50283d22a6f206d46873ac5e04effbeb11a0fb456a948d02e89ca2b351250f8cf52f147834af59a927ac336f8eca79a036216e9180bf6763d5a580bc1f640258092e6d6b97e52ae598005d579c29cbc1e8159cef0dbffded4165f7fa512dcf07fa3c94c79fd17a4dc9020eeacdbf45842df3a69470b203bf9ba73dead89a27ddf80da2c5d4e5702f335f38815ee2ed3ad67bc3fcdc4b5f1bd291c03495ff8540afd545fd7afc3a8a7ff9d7654f7acc4858f2d828e440503632f1588a53f12c24326070142367a6ff40fd10d0273a787a05114108350eed483de9eb051493bea1a77cae3b565695848d77cb23109cc3c12ee43279dd1d31df01f5122b7f9bfa013b559583e98763507165932d43e9acba7dce814aff14276e49027807b0237a11959b7b58347db9f3c2429dc5ebbf49124f65e856761a7388b3ded3787cb5f691a2a175cbb85378ab43f96e798c31b82971fd4b7188e641e76f8c31db5cc7f0f24bd7ddb9dc5439163f77f8ef4194c0aa981c76c8e704b173cb55be48d5b8dd209804c8475872067dc603bef345e8f45b1700f556a55bb9281ceb0e85484d3674e6c736a43b50ed6e2e3e815617f4d23f4b03d741c82aab4939cb39e52a99e2cac1dc3898fb12145040e3bc468fdfcac30d1a805b67132473b1815db9e60a13f0db55c1a0b95f678928050d5c0d6fc742d7642463cd1df6fdd962aacc522523fc3613b6656ec80eb81ff858987e5f1bc654bca18aec04e72509d784ddffa09a83f08d2fee8daab0434f3c6c4d63fa21908873daa8535b2ad3af2913aeb508a92bd176e482aac3ac48ef357198975feb8342249e81a51e2f596c767f57570b800851af20f1638ebba95a1ceb35ca58b30292461c474d695721b3e12b4a145121b6daac94ab7741add91ffec54c134f59134207954807c0d6dc2346bfde584840fd8a846c8c3bcf4151297942aaae140e1f8a82b74364383d2fd42539d284e6fccd7be0ca77134378754c47b507a46f1e10bd6771a84afed1aff87ece94e1b7bdc3d0b0df5541d84257d3ea03bb9bd345ea6c9e529eeb197a3a1ae83aa25c93b077171d619e5f08a876f6b0c7f9461f6d7cef0f3c9ba6bfff41a97782ab8aab834d26c5d0c4f19204282319a7ac17781ba094329665fd7bf3ed2d3a4181e1219bc80d36af30fee9dfb74a7b4c234b78c9d71003efc1a0dca2ad3e0160f133916027d9d7a88709096fa1bf00a3c34004c5fed6d3fa20068bfd04acd3239c584569499d0e9f51c5075c196350a7160a5d63701bc2030bc5ebca61b7f376420209e0fcb5b8d24d9c806b19d592c04b0f1071b2fbd5f5f4737cb7b1dd5a549f729f065af6673c93989d4f7da6cc157a67449095e9f2a8b27bc5b644cb0a8f8bbf8290b61485afc91b507c97b2b771147dd613d4c4c60684b1fa005e42e16f4b09d1482cb1a2428deed988a8789c3e51962ed2fb7aef5f2ac90b52e2413096f29329e92f5827a737adba0f3f2465be128b556e9168a72038d71606b5a980d28db72a69f6f555d250c464041cf33a974ff1a863732d31997d4ef5e6b91af4479f496e7500ebc6695e8aae94c1a6969adf504f57b5e47a62948cf02f787843dda363db87b68c06c287cab6ce4c41192187967ad6f1bc77b6f2acefda0c4376fe5c1fb48935e6ff45aece7234b996298b0ea1ee8c22215339786ccbd9d88f55e918579018c2621bc759832e2612cdc8901ff726a299a012af89fdf0bf025fd1172acc88fa6a427d9d20f4289ed5429057a3db1995d2bda9ceb689f12da0dd7295c95cbdd49d5930534154f24b2ad7858c1e6018f0d2af68e6a7c62c085cceb16ec23793fb4edc4566736d42819e29f7373a61b139a697c9d0f1367e6a08bef2f99fc948183f4147fc6111196dd99fad3c6d61fc14d59448f3be693f9e1e042edcf3e3a1207b918fd0f985f76bdd69e2ee8ebeb7ea640f27610f1d89ef3d392942258ad39c7e7ab43f54279018529220eff41c7e7b1ce8236bbf02bea4fb87829a02a83242e3286ca8b5db8ca72487909a49d5e88c9a39d6c1e58b702073bbf71abe9f011665fac9db4282db6d99d833182a1d1d8fef965c3ccde48033d2e6f164e864616f3fa7406374915909225207e821882ff8152d4588630cbe8956c9b9d259acbb154b8a90f76a36f40a02329ebea5d9cd70cf724f25c6bd0ca329842c24febe6672e739ebfc7f4415aaaf28e42cd607c829e44084f7e13823864ca8b983f7bcf1684e2c4693ec42b2151dc02f067675dd1ddc0547cbad5b1278b0bb0ff8463fa928c678d7d6e297f1e817bb437f7321b69d9a6af1b99a05d7d9ac0dffd482b7a8e6438cb65e0fca2dc914a3f73bce7bf86404259bed166a2e46c2d364aea71f85757172ba73302406da98361ed28bab0ca56f15c2e9f7aac245c119cf2fe4b84be97760a2354b941f31c60a56d76a0df7b7fae05d5e6733b154e5dcb5d77c05a4d31cf659e30784b3cd74ec0778fb623a532bb75d320f636b664d99506407d51264df1572f456d54178207f54c7734739de369fc409633510cc9a571bb61535f28fd3eb39a9a9f5e41e70f1144b1c2560ff13f9e874f96f03170980400ef85e02326b61dea5ec0ad7f9c9dc005c5e1052c425f8fafd1cde6f52f38f55f96234497a760d588920a0a73c4f35472d595e307bd72f5f7e9c0fa04db6c82a06b6061d0479dfd06426dd867602a4443a3533f14f7d0d5da8948d343587079c9705179438a64c22fdfe30d807e56f10d10fa3335b09ba6678dd6fc325dec61212b52dcc8737fee6bb6eee169faea3085dee9ba3aff89ec2b252d5845d6bef4c7c623eaa7532af1fb286f84b04e606ccaaf3fb81c1bb3f6118e5c529af54f7860a212da51d7b9860130e9b0b90eedd349a39f061ac9db6d6587fc7f5b434189a1367755d9ed9007b068b3fa3a9a5cd7046d333c5e2262f27078d2928b7046156fdb07d949fa6535d5d06537926691169619627571760b1ea41b1aa942dc282ae59091a259e4eb6ef653411e97285914dfbd32fa519ecc5331f472c43d0c07b5a46ecbfd117b5c22bdfc3b1b94f769bf5000d7f300145fed7b29d4a63d21ebc273bf7279b3f7bc4a049eb47a351f5b60e130ce234713ded17d05910a888c2f5685611b8ccfad4e1904810ce57dae0224585336ccb66f228b880c046c7c3acae778a159681e73caffdd27d7f9f9800622b1af85ba3af9acd9c361cb43e0dd84ab474c97970f33376b2913cec9fc1e572c912b62dd215333e8158bdd0e1ccaabd0d185384dad80d40eb22ec9ff9bcbe8bf004215e2c587f365ee3393d9388865ba4ed4c7806e1d87f122e8b41f79ca30cda5260ead1c05704866cc071b9c6bfba757037a98c372dd3a54117f223b4ac174a21a142f85c3d13bf539b45dd83c9a1486331c5bf7805266edc142b4ab4c2d4c7766b4cbfe4109e37244fc7c9c3d0b7a9ed5f0fb19b6324a3c3bc74442caf1f19854c4aebc13876c1bc285b9a96e14bb07148565dab7e96773770004cf8bd0a23c1b54133a329345f2c58b01c0ea30a28fc8c51704446c28dde5e47bcca67f1e9adbd07e5fef49958925fb1b526a09df931318c9349fbbccb9b67f5bc247ce81cc317fdd47aad99ef8f0100127e87f8847f3f82b50a1419f9f046d46f8f70b21bfbb4f634d277cff33df870fd64ac0b075243ccd35e079fe8e5db85417a8f530698e8cd39c2203998f8f4b4f14b942917fb7f05084c58b8179408cc02a7a4f455ae6198552aed042b25080da657cd472bb196ffe1d25cb8194a923eef83513ae71c96f6a7e6a72c2efc063de24f1619d177f4ffeb66386dfb3d77c8ed32d439194015b627124c4e65556e50a107af5d78229f72e83a7827dbf6cd11cd1f282e4683a1ed704971b2b5be64b4d10d7418500f808658e966541323dd110093a9980b367bbc52b6431e752a29c119db868e2de0d5594761c395e343da0303abddaeb0061366fdd037138d24ac107d7f19e43f2e7be3f8a95b3de2005e58daf3a1cd7eb8eb0ae9a732cc99ba360e971c3ee73c319235de708274a170bd9709fdc6d726ffade67c6e2ca3d50599199219c543c7cf1159c06d39d3cbd5e59476d7bd5e3bcd29521b3b8ad910d564e998ad65b10ca9333b71626bd92618c502c965e3bd4c4c10c3576009bb9b538726c776def62733949dd77f65ba5bb93efdd9855cf06b3262c6c0436abedabcaf318faded4aaa50e9a2ed54e5f28f7d4892054e1efa7f1a6498ce254d377b773bab9497c17192774860667570df8ecae9ae6993e13b8fbc5b3f6a69879e7962eaa6d5d14a53866a452d58b6dae7e2319e6deec8fa9f14792ac11b7fd884510b9f749ae5f68d1ff95d70117c67ae4bfd25f8083b893da5f46faf8721ddbb693ab17b677dfec9c90b095c4f306ac0abf701f3d8fe0e2795fa387834d20adb07012272beaa9bc009588c4030782bf73f3dfa563e0f02e207dfcde6d36e062962ccd5f812fdcf42dd7a50de5c2f5484ca57a9d479085f81adc09f680ee9325e161f89c2667670ea0f8f18e3225efff2a077d8c9a156c9e48e1001ce60f8b9fdb34f6e2f496eaf73ecea376a1218fc8252e388b2d834a143f90ce93fcddb581117988aefead29549ac1619456b2ade67820db52a2fe6d1a88d286ef0460ea29edc9507cbfe7fadb3b384bc47a6a2d782dcf02bd8d9aa0a63949b206d3fa404403c508140749e2673c2b4ec13fc94a7b37b1f1c6c94c3143d10c0e6ceba822f1d6cafb2f6057d53da4c267ac898ee76f0de474cb10e101609ff45c85c13924edfead4b91bcf5f8d3b086a547fdaf767ee1fe104261d9b594bc71cbe8a11678bb81ceb4d78d558f4411082c3c68f2fabe929c125afebb4cb4efbc9853a868ffcee3f016540f0b8f09cb240f67ed9915dd4cfd4b693c02c4e96eabd7694524e02d5f83a916be3669991b4a069c23b9acb84d298e3e50607ccea41163c52a69df20c58b7cd20603ee5aeec2c475aa138b47f2adc9a5454cd8fe196bcd970a674e57abb0a347ca00ddcf8dc22c645", 0x1000}, {&(0x7f0000001600)="fd581b93e1515a7018e5154a7c8b1161b23e8c21bb86c7f4b5b47e3e0ec2259793bd84e2868e9398a58d264cba3949cc222ab6cbb1035534a6b559214d432b62bde7565e1b8ae7b9e297a866e432208def53c9ee228359649c7445722012ee7930108941a8e4caffa1b5332c70ffb27cb9fabe569f0b14297844248dd0067916d7b541e456b35f9599367f324be76dea1424da3c8c2dea7d94590526d46af04fa7e641f43e3ffedf8697ebb92a50e36c65d5f246743d5bed57ef76fea60d7d464112f290cf7be648", 0xc8}, {&(0x7f0000001700)="863d3042c32e50a791f6e2d649aa6591f49982fa22bc63018b4729c0bf936f8c945643d497cb9fb39f00cac5b79f70aea0fccea66786f194d4d5d26af26b09def0263e28a97c4dc74bdc4f00ce5d031d7f5c948793b496c63ffaef270bedc19dbd0be91b37ae2c4873cc5924dc45bca76cb8e417b14e30e0e1fb97d5fec2cf234a68", 0x82}], 0x9) (async, rerun: 64)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34) (rerun: 64)

02:42:29 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:29 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) (async)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)

02:42:29 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x7f000000}]}, 0x78)

02:42:29 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0xdd01}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:29 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:29 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x9b000000}]}, 0x78)

02:42:30 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

[ 1628.872548][T24641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1628.910524][T24641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:30 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0xffffffff}]}, 0x78)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f00000002c0)='./file0/file0\x00', 0x0)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00')
renameat2(r2, &(0x7f0000001680)='./file0/file0\x00', r1, &(0x7f00000016c0)='./file0\x00', 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200088e5, 0x0, 0x0)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={&(0x7f00000000c0)="513c22ae740526eb45bcadfe4fcd455b02cfd530bb4ae8a9a8cbb17d3b6f5b382286b1e6a1063328eae29a43ec23c5304eba0192f81c7643dfd1e0384992c05decc34d24adaeb736d6a089ecf6e3e0bb58d38380ece5ff0ae1a847fcbf8bd42ff3d22ec344ac8820bcd82439f1b50a63877410c5134f4226cb683454949b0ac70ac95d272ea130aba880e250", &(0x7f0000000180)=""/193, &(0x7f0000000280)="48348491fe578c55bca8085118e415654a146641e1c8e0d498aef48dc72fd044d09b5ef0efadae35d02a44f310a8d5fa01dd42a0e59b96c13b319b0aa8a54bc116c1258b876b10", &(0x7f0000000440)="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", 0x7, r2, 0x4}, 0x38)

02:42:30 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0xc000)

02:42:30 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x40000000000000}]}, 0x78)

02:42:30 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0xea03}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

[ 1628.948988][T24641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1629.023293][T24641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1629.036626][T24641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1629.045489][T24641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1629.046881][T24641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1629.049331][T24641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1629.050708][T24641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1629.054380][T24641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1629.056526][T24641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1629.059086][T24641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1629.061631][T24641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1629.066495][T24641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1629.079047][T24641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1629.081050][T24641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1629.082715][T24641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1629.084163][T24641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1629.086946][T24641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1629.088328][T24641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1629.090017][T24641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1629.091423][T24641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1629.092825][T24641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1629.094213][T24641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1629.096970][T24641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1629.186083][T24641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1630.259551][T15275] device hsr_slave_0 left promiscuous mode
[ 1630.268301][T15275] device hsr_slave_1 left promiscuous mode
[ 1630.286845][T15275] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1630.294294][T15275] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1630.333719][T15275] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1630.342235][T15275] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1630.351547][T15275] device bridge_slave_1 left promiscuous mode
[ 1630.362180][T15275] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1630.377682][T15275] device bridge_slave_0 left promiscuous mode
[ 1630.383931][T15275] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1630.408906][T15275] device veth1_macvtap left promiscuous mode
[ 1630.415056][T15275] device veth0_macvtap left promiscuous mode
[ 1630.421273][T15275] device veth1_vlan left promiscuous mode
[ 1630.435889][T15275] device veth0_vlan left promiscuous mode
[ 1630.816465][T15275] team0 (unregistering): Port device team_slave_1 removed
[ 1630.836292][T15275] team0 (unregistering): Port device team_slave_0 removed
[ 1630.863670][T15275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1630.894118][T15275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1631.052567][T15275] bond0 (unregistering): Released all slaves
[ 1634.695379][ T3630] Bluetooth: hci3: Opcode 0x c03 failed: -110
[ 1637.672704][ T6013] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1637.683772][ T6013] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1637.692504][ T6013] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1637.701740][ T6013] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1637.710384][ T6013] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1637.719214][ T6013] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1637.924394][T24796] chnl_net:caif_netlink_parms(): no params data found
[ 1638.004492][T24796] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1638.012769][T24796] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1638.022278][T24796] device bridge_slave_0 entered promiscuous mode
[ 1638.031363][T24796] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1638.038859][T24796] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1638.047399][T24796] device bridge_slave_1 entered promiscuous mode
[ 1638.074921][T24796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1638.086993][T24796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1638.118641][T24796] team0: Port device team_slave_0 added
[ 1638.128700][T24796] team0: Port device team_slave_1 added
[ 1638.152058][T24796] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1638.159089][T24796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1638.185526][T24796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1638.198705][T24796] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1638.206203][T24796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1638.241752][T24796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1638.293531][T24796] device hsr_slave_0 entered promiscuous mode
[ 1638.301640][T24796] device hsr_slave_1 entered promiscuous mode
[ 1638.311014][T24796] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1638.318829][T24796] Cannot create hsr debugfs directory
[ 1638.450832][T24796] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1638.458003][T24796] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1638.465431][T24796] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1638.472534][T24796] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1638.536899][T24796] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1638.560918][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1638.578253][ T3687] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1638.593584][ T3687] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1638.611794][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 1638.636266][T24796] 8021q: adding VLAN 0 to HW filter on device team0
[ 1638.649725][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1638.658981][ T3687] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1638.666207][ T3687] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1638.687322][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1638.696488][ T3681] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1638.703584][ T3681] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1638.729108][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1638.739691][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1638.748471][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1638.762995][T24796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1638.783957][T24796] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1638.792695][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1638.801744][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1638.825435][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1638.832960][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1638.843613][T24796] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1638.868509][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1638.893970][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1638.903638][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1638.913842][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1638.925616][T24796] device veth0_vlan entered promiscuous mode
[ 1638.940463][T24796] device veth1_vlan entered promiscuous mode
[ 1638.971600][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1638.981106][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1638.992937][T24796] device veth0_macvtap entered promiscuous mode
[ 1639.006248][T24796] device veth1_macvtap entered promiscuous mode
[ 1639.036788][T24796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1639.048585][T24796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1639.059381][T24796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1639.071841][T24796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1639.082746][T24796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1639.094091][T24796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1639.104599][T24796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1639.116580][T24796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1639.126816][T24796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1639.137675][T24796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1639.150203][T24796] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1639.159409][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1639.168562][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1639.177498][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1639.186695][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1639.199279][T24796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1639.213008][T24796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1639.224067][T24796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1639.235477][T24796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1639.246146][T24796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1639.261173][T24796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1639.284358][T24796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1639.303314][T24796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1639.313887][T24796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1639.334169][T24796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1639.356093][T24796] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1639.366029][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1639.384303][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1639.493518][T15272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1639.512665][T15272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1639.529552][ T9975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1639.530439][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1639.547806][ T9975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1639.568731][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1639.655647][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1639.667981][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1639.679530][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1639.690969][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1639.703423][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1639.715717][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1639.727170][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1639.735753][ T3687] Bluetooth: hci3: command 0x0409 tx timeout
[ 1639.739568][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1639.758209][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1639.771021][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1639.782547][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1639.794378][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1639.806161][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1639.818354][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1639.830844][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1639.842054][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1639.853401][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1639.865742][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1639.877055][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1639.888987][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1639.900993][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1639.912654][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1639.924556][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1639.937128][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1639.948895][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1639.960577][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1639.972628][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1639.984315][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1639.996407][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1640.007696][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1640.025993][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1640.045882][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1640.067978][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1640.086434][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1640.105893][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1640.124936][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1640.137384][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1640.156470][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1640.176572][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1640.195528][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1640.211566][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1640.227681][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1640.240150][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1640.251307][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1640.271024][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1640.291437][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1640.314087][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1640.334864][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1640.353997][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1640.372925][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1640.392399][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1640.403472][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1640.422024][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1640.434127][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1640.459549][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1640.480237][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1640.499247][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1640.514367][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1640.533523][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1640.554457][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1640.575808][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1640.588628][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1640.599631][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1640.611048][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1640.624063][T24805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:41 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xf, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x60}}, 0x0)
ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000000)=0x9)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async, rerun: 32)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f00000002c0)='./file0/file0\x00', 0x0) (async, rerun: 32)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') (async)
renameat2(r2, &(0x7f0000001680)='./file0/file0\x00', r1, &(0x7f00000016c0)='./file0\x00', 0x0) (async)
writev(r1, &(0x7f00000017c0)=[{&(0x7f00000001c0)="5fd485bf7d4b67a90a4d9fced1ae6a3a600e805a11da8d0bb53fc8db68c2316879e570eee8841bc4e4d1202d22423d233147ce1c6ef061bc4c1f49a1fa8d427fc8109573434a76efb19e284490a38d93f72bcdc882e9047b51a6bfc743b26d2a49aabac70e333eab7bd2df8bdfd4c282643333598151e8671d30e6e143f83bed6492815e57b8fb6749b1c5d32976e9801910656865995e43d18d7d3d6cd37109b54157adeb80a8caa9f1881fe304b5992e854302e94b7a3f36478becafc25ed0157fe078de9a0a9a5f2d33ebf4c39c65e275b9e3", 0xd4}, {&(0x7f00000002c0)="ede923bdb18c7532dd254b0bd494e65e9e93a377010375cbacd7b1b7b2b915a7272e5e262b04b9e1d9e82c7d153020b0b89af59cc0059f441b2787350630312a8fc8741468c58a9b4786285cd65690a2424cb8bdd5c26a0cb08f2e5008a4ea195461d8b7fd028a9a6d79cd7da3341016f28c75cf73e59296dbef6161c9dad52962d7fd26466ab813c77a09bfc642b5ed4da3cc45c41072300e39014b", 0x9c}, {&(0x7f0000000380)="815cc30bab8d5c53a659e1ea8cf08157e9aee4467def8d4f38e74a181ee93e62ec9871aec504ea7dd4b9aff73a7a0c64bfa7eb49f5c56f729029549a894c520d026c289b9e7ea19d7f7b09a3", 0x4c}, {&(0x7f0000000400)="22d0b99f2a722a2fe60d643eeb22b85b3a2deef59b5ad8953d13b7e3faefe9f8b6a9acc70a48e171c9da4c5e6c5bda11e074b2d86148749f6f812103ac10e7e870fa03d3d7", 0x45}, {&(0x7f0000000480)="1cc685f01baf54f3b77e9146b46121f2fbb577ee443c25d7b0ec8bdf6866ea6caf8b342eef6146b28b5e8e1ac6a4be6e60d5719a6dbda4358cccbf184b8dcd5f25", 0x41}, {&(0x7f0000000500)="e8d242fb7452b854b8f041275666f5af7521de14427e34af77ccf7f5d4f274d5fb63d1a1d0c0a38d6ca8ad8741dbaaf4a9f0337a8210662de339cdcf9a77d8a0b007fbe1e21435ce2de7787dcfcf00f7df8b6134b5519d3799f356a87710cbe47cbfbc6410e0114dab103878dc9dd9d40f61988091b87d3f08277e53631fe4ae3dfd01232e89eeea850cb6226ad472f6bf4a797056a277a0ba6f834f7ebe2cc84863548357fa7b394447b4b5e3d2908eb519465abaaa1da460812b795408afa647affa3363af314a5ec449709fecdb04d1938deffe52debe799f", 0xda}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="fd581b93e1515a7018e5154a7c8b1161b23e8c21bb86c7f4b5b47e3e0ec2259793bd84e2868e9398a58d264cba3949cc222ab6cbb1035534a6b559214d432b62bde7565e1b8ae7b9e297a866e432208def53c9ee228359649c7445722012ee7930108941a8e4caffa1b5332c70ffb27cb9fabe569f0b14297844248dd0067916d7b541e456b35f9599367f324be76dea1424da3c8c2dea7d94590526d46af04fa7e641f43e3ffedf8697ebb92a50e36c65d5f246743d5bed57ef76fea60d7d464112f290cf7be648", 0xc8}, {&(0x7f0000001700)="863d3042c32e50a791f6e2d649aa6591f49982fa22bc63018b4729c0bf936f8c945643d497cb9fb39f00cac5b79f70aea0fccea66786f194d4d5d26af26b09def0263e28a97c4dc74bdc4f00ce5d031d7f5c948793b496c63ffaef270bedc19dbd0be91b37ae2c4873cc5924dc45bca76cb8e417b14e30e0e1fb97d5fec2cf234a68", 0x82}], 0x9)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)

02:42:41 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x9, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:41 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0xf000)

02:42:41 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0xf0000000000000}]}, 0x78)

02:42:41 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0xec01}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:41 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0xffffffff}]}, 0x78) (async, rerun: 32)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f00000002c0)='./file0/file0\x00', 0x0) (async)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') (async)
renameat2(r2, &(0x7f0000001680)='./file0/file0\x00', r1, &(0x7f00000016c0)='./file0\x00', 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200088e5, 0x0, 0x0) (async)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={&(0x7f00000000c0)="513c22ae740526eb45bcadfe4fcd455b02cfd530bb4ae8a9a8cbb17d3b6f5b382286b1e6a1063328eae29a43ec23c5304eba0192f81c7643dfd1e0384992c05decc34d24adaeb736d6a089ecf6e3e0bb58d38380ece5ff0ae1a847fcbf8bd42ff3d22ec344ac8820bcd82439f1b50a63877410c5134f4226cb683454949b0ac70ac95d272ea130aba880e250", &(0x7f0000000180)=""/193, &(0x7f0000000280)="48348491fe578c55bca8085118e415654a146641e1c8e0d498aef48dc72fd044d09b5ef0efadae35d02a44f310a8d5fa01dd42a0e59b96c13b319b0aa8a54bc116c1258b876b10", &(0x7f0000000440)="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", 0x7, r2, 0x4}, 0x38)

02:42:42 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xa, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:42 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x100000000000000}]}, 0x78)

[ 1640.978076][T24859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:42 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x20000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:42 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:42 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x180000000000000}]}, 0x78)

02:42:42 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0xffffffff}]}, 0x78) (async)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') (async)
mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f00000002c0)='./file0/file0\x00', 0x0) (async)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') (async)
renameat2(r2, &(0x7f0000001680)='./file0/file0\x00', r1, &(0x7f00000016c0)='./file0\x00', 0x0) (async)
sendto$inet(r2, 0x0, 0x0, 0x200088e5, 0x0, 0x0) (async)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={&(0x7f00000000c0)="513c22ae740526eb45bcadfe4fcd455b02cfd530bb4ae8a9a8cbb17d3b6f5b382286b1e6a1063328eae29a43ec23c5304eba0192f81c7643dfd1e0384992c05decc34d24adaeb736d6a089ecf6e3e0bb58d38380ece5ff0ae1a847fcbf8bd42ff3d22ec344ac8820bcd82439f1b50a63877410c5134f4226cb683454949b0ac70ac95d272ea130aba880e250", &(0x7f0000000180)=""/193, &(0x7f0000000280)="48348491fe578c55bca8085118e415654a146641e1c8e0d498aef48dc72fd044d09b5ef0efadae35d02a44f310a8d5fa01dd42a0e59b96c13b319b0aa8a54bc116c1258b876b10", &(0x7f0000000440)="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", 0x7, r2, 0x4}, 0x38)

02:42:42 executing program 2:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=@ctrl_frame=@ba={{}, {0x1f}, @device_a, @broadcast, @basic={{0x0, 0x0, 0x0, 0x0, 0x3}, {0xf, 0xfc0}, "cb395e5ec95c718c4a9d43f47dda21613a66b9d0397ca05dc49ecc3ae7f1ec6a9322b8d28b46da18641096a7b474ad00100e9835622c606b66276f2759233448166cdb2becef75577daaad244474ebcc7b287ee961bdc9427cff1a5c71d3660a6ee7a1a8679f56475f2d185ca25de643f24ad07b5fc08300b73c6cfca70b72a1"}}, 0x94)

02:42:42 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:42 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0xff0f)

02:42:42 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x200000000000000}]}, 0x78)

02:42:42 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x40000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:42 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f00000002c0)='./file0/file0\x00', 0x0)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00')
renameat2(r2, &(0x7f0000001680)='./file0/file0\x00', r1, &(0x7f00000016c0)='./file0\x00', 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200088e5, 0x0, 0x0)
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e20, @private=0xa010100}, {0x306}, 0x14, {0x2, 0x4e20, @broadcast}, 'macvlan1\x00'})

02:42:42 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xd, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:42 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x300000000000000}]}, 0x78)

[ 1641.413511][T25048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:42 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f00000002c0)='./file0/file0\x00', 0x0)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00')
renameat2(r2, &(0x7f0000001680)='./file0/file0\x00', r1, &(0x7f00000016c0)='./file0\x00', 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200088e5, 0x0, 0x0)
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e20, @private=0xa010100}, {0x306}, 0x14, {0x2, 0x4e20, @broadcast}, 'macvlan1\x00'})
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) (async)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') (async)
mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f00000002c0)='./file0/file0\x00', 0x0) (async)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') (async)
renameat2(r2, &(0x7f0000001680)='./file0/file0\x00', r1, &(0x7f00000016c0)='./file0\x00', 0x0) (async)
sendto$inet(r2, 0x0, 0x0, 0x200088e5, 0x0, 0x0) (async)
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e20, @private=0xa010100}, {0x306}, 0x14, {0x2, 0x4e20, @broadcast}, 'macvlan1\x00'}) (async)

[ 1641.480591][T25053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:42 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:42 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x1000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:42 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x700000000000000}]}, 0x78)

02:42:42 executing program 2:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=@ctrl_frame=@ba={{}, {0x1f}, @device_a, @broadcast, @basic={{0x0, 0x0, 0x0, 0x0, 0x3}, {0xf, 0xfc0}, "cb395e5ec95c718c4a9d43f47dda21613a66b9d0397ca05dc49ecc3ae7f1ec6a9322b8d28b46da18641096a7b474ad00100e9835622c606b66276f2759233448166cdb2becef75577daaad244474ebcc7b287ee961bdc9427cff1a5c71d3660a6ee7a1a8679f56475f2d185ca25de643f24ad07b5fc08300b73c6cfca70b72a1"}}, 0x94)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34) (async)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=@ctrl_frame=@ba={{}, {0x1f}, @device_a, @broadcast, @basic={{0x0, 0x0, 0x0, 0x0, 0x3}, {0xf, 0xfc0}, "cb395e5ec95c718c4a9d43f47dda21613a66b9d0397ca05dc49ecc3ae7f1ec6a9322b8d28b46da18641096a7b474ad00100e9835622c606b66276f2759233448166cdb2becef75577daaad244474ebcc7b287ee961bdc9427cff1a5c71d3660a6ee7a1a8679f56475f2d185ca25de643f24ad07b5fc08300b73c6cfca70b72a1"}}, 0x94) (async)

02:42:42 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:42 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x30000)

02:42:42 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x800000000000000}]}, 0x78)

02:42:42 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f00000002c0)='./file0/file0\x00', 0x0)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00')
renameat2(r2, &(0x7f0000001680)='./file0/file0\x00', r1, &(0x7f00000016c0)='./file0\x00', 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200088e5, 0x0, 0x0)
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e20, @private=0xa010100}, {0x306}, 0x14, {0x2, 0x4e20, @broadcast}, 'macvlan1\x00'})
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
[ 1641.825267][ T1135] Bluetooth: hci3: command 0x041b tx timeout
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) (async)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') (async)
mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f00000002c0)='./file0/file0\x00', 0x0) (async)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') (async)
renameat2(r2, &(0x7f0000001680)='./file0/file0\x00', r1, &(0x7f00000016c0)='./file0\x00', 0x0) (async)
sendto$inet(r2, 0x0, 0x0, 0x200088e5, 0x0, 0x0) (async)
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e20, @private=0xa010100}, {0x306}, 0x14, {0x2, 0x4e20, @broadcast}, 'macvlan1\x00'}) (async)

02:42:42 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x2000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:43 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x900000000000000}]}, 0x78)

[ 1641.943879][T25178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1641.972139][T25178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:43 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:43 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x3000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

[ 1641.994042][T25178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1642.022177][T25193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:43 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0xa00000000000000}]}, 0x78)

02:42:43 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:43 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x34000)

02:42:43 executing program 2:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=@ctrl_frame=@ba={{}, {0x1f}, @device_a, @broadcast, @basic={{0x0, 0x0, 0x0, 0x0, 0x3}, {0xf, 0xfc0}, "cb395e5ec95c718c4a9d43f47dda21613a66b9d0397ca05dc49ecc3ae7f1ec6a9322b8d28b46da18641096a7b474ad00100e9835622c606b66276f2759233448166cdb2becef75577daaad244474ebcc7b287ee961bdc9427cff1a5c71d3660a6ee7a1a8679f56475f2d185ca25de643f24ad07b5fc08300b73c6cfca70b72a1"}}, 0x94)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34) (async)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=@ctrl_frame=@ba={{}, {0x1f}, @device_a, @broadcast, @basic={{0x0, 0x0, 0x0, 0x0, 0x3}, {0xf, 0xfc0}, "cb395e5ec95c718c4a9d43f47dda21613a66b9d0397ca05dc49ecc3ae7f1ec6a9322b8d28b46da18641096a7b474ad00100e9835622c606b66276f2759233448166cdb2becef75577daaad244474ebcc7b287ee961bdc9427cff1a5c71d3660a6ee7a1a8679f56475f2d185ca25de643f24ad07b5fc08300b73c6cfca70b72a1"}}, 0x94) (async)

02:42:43 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0xfd5, 0x25, 0x5, 0x2, 0x11, "307e4f7aebcead5c102f5539e11516c049ba76"})
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb596}]}, 0x78)

02:42:43 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0xc00000000000000}]}, 0x78)

02:42:43 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x4000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:43 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:43 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0xd00000000000000}]}, 0x78)

02:42:43 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3e, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:43 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0xfd5, 0x25, 0x5, 0x2, 0x11, "307e4f7aebcead5c102f5539e11516c049ba76"}) (async)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb596}]}, 0x78)

[ 1642.463203][T25306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1642.502957][T25306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1642.541418][T25306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:43 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x5000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:43 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0xe00000000000000}]}, 0x78)

02:42:43 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:43 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x90000)

[ 1642.586066][T25313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:44 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000880)=0x1)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)
syz_80211_inject_frame(&(0x7f00000008c0), &(0x7f0000000080)=@data_frame={@qos_ht={{{@type00={{0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, {}, @broadcast, @device_a, @random="92eb06005c82", {0xa, 0x20}}, {0x4, 0x0, 0x3, 0x0, 0x6}}, {@type01={{0x0, 0x2, 0xd, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_b, @initial, @from_mac, {0x9, 0xffd}}, {0x5, 0x1, 0x0, 0x1, 0x4}}}, @ver_80211n={0x0, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="8357f050c72b02846728427e4a9abf366c7726cfa3b108817bdea0f45d8c905b5254067e59e5cb84ba1a704b185b8d507091128e5251527b9d850d6d2a92b0d16e8337fe23a6288f282cc651a168d9f3201d42f7edf7ab105ff8674584af5f3c33db693a152ac7668d51897621a192e5b8935084012d3a2fedfbe0d7b9d4bca7e2bea031eaa6c220738669549f010e6302b19d53a835fd294f9aae050e34818d900f0bd734ae31737d26246d72545a4097231ff9718fa060033e589529ddc4d41c3ef6476dfc431efb6df950247b321d858e302e303512609d61fa17fe75ff078b57966b738d748f4ccc60c39161456011ab964be47587db43c9734917cc4ad13d1fa8f753dcfa8a25009fc90e2121b98ee1214cc153769fc75ca61ca0abd526ef3cb1a26f0076a64db5c691e0c71fb31424e04d597149db1b61cfe4f9196b9be9a5f33eeebdb87aeac5de30a272a81dad9a7026747a23d33d4d713a3c6de30271097f00c12f73ab2bbc6a3bac8f1d47dddc4208905d8af57fe9f3e65d6594ddb634f3110701e5779be9a3eb495a007cb1903ab66397f8a53d5f95dc94102708ea969c08b88fd436fe2692c80e0794c52b2a71969ed176cb5c829926038a67870b2990785ecd12a9d5d1193c2a9297d8f80061512d3e6ffb2a4cef7c01f3f65006426f26306a5da121e0d2718da1ead7643744d0cf8de6be6efd974865ede1b731da3d44f1aca4c7720ad007a49002bf88319e82ded7a0cc170fd22aefa49c0c7fdc92b49754631aa0a6c56969e320fd06d91e7460b8420444bba5e1ae3d32655286f12ae9d295c2152a4da8e67721f4c05a91974fa4db7e37f423b78721a32b749eea375276fe8bfb80ccbbd5fca4507998d922b1c9b1ef8acbb0c7c73cea6f9be45a9bee5be1440fef340c41eab6046ec8c24563597c83fda857cd7ef92c6f00e88e5e5c8b2720d203b037456d0348252d8d89ff64a0342f656c17776e43c8a0956487c16538031ce5f9bac89670201b5cad92a699fcffa5b5a8d311e63a7a9799314cf7f05fe38193a08f7d0f57f801a396175c2e93ad3ccfe6e1a60e2f7ae76f0e787f000063e4936a0a9dc02e78db50d4aed4910da706cb9ff9e569651ffd7e790b7e21f59b3a1160f6a522c1219bb00bc2eaa9b5007b9bbdc3de69ebac559d449202d5478ed0a47e3743f49e4311e8d2d59f71aed98b8874657431495f146951e474492e017fd7bd32d8a8da320c96ebab8bc815c6e7a19d6c67aa22938d2b3a4922286ffea5515d918fe7f0fe947b31b40d3836fda6dfd42d26ad869faa6107b1021cd46748dbd9f9402616d909710f02d9805e656e443eeda5296f7452a52d4eb9730fcbf09aa118a695b620a4e29ef5e44b5ab7ed10cc56205c7326540e6eb5938c1198e848a0f22d1263eb0ad24f94e4ef969d421770349fa518418e9eab4ea6316491d3cf98f4e83ad35ba55906ac4af5cb5de57db96e94044739a26cc9337ce63be2792007c98c7d415e1f5fcfa74aee1c1fe8298d62ea9b73c7630ad73c2d484ad6e14e0c4b64c9414fe3996e141fe893b68c68ede32424abcf1e4e2dc382433821e35c9019f677f0d191b2ec2fbb151646115102add674b55a0f9f4b8200eee3b66cac0a064f88a8296caba09b01642cb4ba4a320bcec24c428585a61b86a3fa4c28f488baa548a246f93bf95655de9b0b5b6c93601be3518b78f3a96278d80b5ae53a0014e94979e90c2bc7df186a629996a161685591045105ff7e8c50c6906aa7221d0d41d661e1ef1754d10e0f0f0e4140161eec598164d49830ac200b1069a0f34fb5a2a2ee3e6e1c28abb3476593f740e610632b0274f00ae0c71282f9e843df3881050424629550fe70cc79e5e09722f319b0c7f7d9f751acc697aad19eb388b90b724194746afa22336ac0f587a6c72fb359944428bff212ed15204b7849f7738aa3529c8720f2fd015590eb3fec835576825c96ee4f0abe6b51b1b150577248a8d09796500a1a62362bb5ef5e512a6fe9703a34fdc6b13da27048f3fc58388275006c055e2b575b468c357c86d59c5afcebeea7b6b04b206ea084e01ae3199e6b09f5165e22639f342b8e9ef3fc82a768be0cdc06154774ea07876907eaf332f150458f98cd37b38bc587c3364a7c5044bbc7760b43f6c856eee37758ea1a39564503338bd5e49b0a2d7e707eaddfe0f4de121740e39b6be11fc212552d98588ca5194ca7578effc5136d3ae6f90f3659de782b7971030591fcde11ce293815202c13b202ab47e691b52d4714b623bc58b18b8323121649c864ce52c9563fbc17ed2defe981c59f5ce2e07d31f60365088eeb8c3ef3e92579e79072655ff44ce2f3c4bab64e1fb109596ed1997ae4d43244435ffa5be2578f7e768cd0ac5e75d4b3b18a189634c55d8a04ff7f65451ca699ab3b24ac581ade8ac55760e265b55174dcc039699c7bdc84b7caf26ce5c675e0be5025fd6ee59f230e440ba00789f7f0673649b1b5e2764f333b23521dff00b39d88151e74533a2ebfd3ec2bd236f58c5d0e70473d4d1e3589eed3c47d7b543a968fab7e7e4613e239d956b9aef3ca3d58fb236cab7a834b825ca9f68f01ad1eaa6b52a7d51b508ca3d8e208161d7730405a1a91c5d514a10bec530e3f57017aad77879bdcf4"}, 0x79b)

02:42:44 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x78, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:44 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0xf00000000000000}]}, 0x78)

02:42:44 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0xfd5, 0x25, 0x5, 0x2, 0x11, "307e4f7aebcead5c102f5539e11516c049ba76"})
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb596}]}, 0x78) (rerun: 32)

02:42:44 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x6000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:44 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x200000)

02:42:44 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x9b, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:44 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x1800000000000000}]}, 0x78)

[ 1643.072779][T25483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:44 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x7000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

[ 1643.118201][T25483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:44 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf0, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:44 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}]}, 0x78)
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000140)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000000c0)={0x2, 0x80, 0x20, 0x4, 0x1, 0x1, 0x0, 0x80000000, 0x300, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x10001, 0x2}, 0x80, 0x7fff, 0x6, 0x6, 0x7fffffff, 0x79a, 0x8, 0x0, 0x81, 0x0, 0x2})

02:42:44 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x1a00000000000000}]}, 0x78)

02:42:44 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000880)=0x1)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34) (async)
syz_80211_inject_frame(&(0x7f00000008c0), &(0x7f0000000080)=@data_frame={@qos_ht={{{@type00={{0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, {}, @broadcast, @device_a, @random="92eb06005c82", {0xa, 0x20}}, {0x4, 0x0, 0x3, 0x0, 0x6}}, {@type01={{0x0, 0x2, 0xd, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_b, @initial, @from_mac, {0x9, 0xffd}}, {0x5, 0x1, 0x0, 0x1, 0x4}}}, @ver_80211n={0x0, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x79b)

02:42:44 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x180, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:44 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}]}, 0x78)
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000140)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) (async)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000000c0)={0x2, 0x80, 0x20, 0x4, 0x1, 0x1, 0x0, 0x80000000, 0x300, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x10001, 0x2}, 0x80, 0x7fff, 0x6, 0x6, 0x7fffffff, 0x79a, 0x8, 0x0, 0x81, 0x0, 0x2})

02:42:44 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x8000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:44 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x1b00000000000000}]}, 0x78)

02:42:44 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x400300)

02:42:44 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x300, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:44 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x3e00000000000000}]}, 0x78)

[ 1643.569629][T25581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:44 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0xc000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

[ 1643.616327][T25590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:44 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x500, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:44 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x7f00000000000000}]}, 0x78)

02:42:44 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 32)
r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (rerun: 32)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}]}, 0x78) (async, rerun: 64)
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000140)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) (async, rerun: 64)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000000c0)={0x2, 0x80, 0x20, 0x4, 0x1, 0x1, 0x0, 0x80000000, 0x300, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x10001, 0x2}, 0x80, 0x7fff, 0x6, 0x6, 0x7fffffff, 0x79a, 0x8, 0x0, 0x81, 0x0, 0x2})

[ 1643.895252][ T3749] Bluetooth: hci3: command 0x040f tx timeout
02:42:45 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000880)=0x1)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34) (async)
syz_80211_inject_frame(&(0x7f00000008c0), &(0x7f0000000080)=@data_frame={@qos_ht={{{@type00={{0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, {}, @broadcast, @device_a, @random="92eb06005c82", {0xa, 0x20}}, {0x4, 0x0, 0x3, 0x0, 0x6}}, {@type01={{0x0, 0x2, 0xd, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_b, @initial, @from_mac, {0x9, 0xffd}}, {0x5, 0x1, 0x0, 0x1, 0x4}}}, @ver_80211n={0x0, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x79b)

02:42:45 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x9b00000000000000}]}, 0x78)

02:42:45 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x600, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:45 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x10020000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:45 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0xf0ffff)

02:42:45 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00')
mkdirat(r3, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r3, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f00000002c0)='./file0/file0\x00', 0x0)
r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f00000000c0)='./file0\x00')
renameat2(r4, &(0x7f0000001680)='./file0/file0\x00', r3, &(0x7f00000016c0)='./file0\x00', 0x0)
ioctl$NBD_SET_SOCK(r3, 0xab00, r2)
ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0xc, 0x15, 0xb9, &(0x7f0000000440)="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"})
ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f0000000040)={0x3, 0x0, [0xccd3, 0x0, 0x5, 0x2, 0xe8, 0x1, 0x8001, 0x100]})
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b5b0707000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000dd479b75a82927ef445e32003a3d8700000000003800000000000000000000000000000000000000000000000000a7071d713302310a00"/135], 0x78)

02:42:45 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x2}]}, 0x78)

02:42:45 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x700, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:45 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00')
mkdirat(r3, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r3, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f00000002c0)='./file0/file0\x00', 0x0)
r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f00000000c0)='./file0\x00')
renameat2(r4, &(0x7f0000001680)='./file0/file0\x00', r3, &(0x7f00000016c0)='./file0\x00', 0x0)
ioctl$NBD_SET_SOCK(r3, 0xab00, r2)
ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0xc, 0x15, 0xb9, &(0x7f0000000440)="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"})
ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f0000000040)={0x3, 0x0, [0xccd3, 0x0, 0x5, 0x2, 0xe8, 0x1, 0x8001, 0x100]})
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b5b0707000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000dd479b75a82927ef445e32003a3d8700000000003800000000000000000000000000000000000000000000000000a7071d713302310a00"/135], 0x78)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
fcntl$dupfd(r1, 0x0, r0) (async)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00') (async)
mkdirat(r3, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async)
renameat2(r3, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f00000002c0)='./file0/file0\x00', 0x0) (async)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f00000000c0)='./file0\x00') (async)
renameat2(r4, &(0x7f0000001680)='./file0/file0\x00', r3, &(0x7f00000016c0)='./file0\x00', 0x0) (async)
ioctl$NBD_SET_SOCK(r3, 0xab00, r2) (async)
ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0xc, 0x15, 0xb9, &(0x7f0000000440)="6196165fd91132011e4574178679c50b70f761294536f5ae87dea8c04ab8242cf9df4851794fb9fae417c1e21c4be246c99ad8b694197ed148195c93326b021d8165b13145d62d8122bb3d866a5e9e3016cae6812c1db6430ceacaefe5ac0503e18f788bdd01577ab5f670524370edbe95e0528b21f5b66fae249f76b81ae62f1cc7c9d9161bb8de699175e3251f62fa4ca1ec731b7463a953f9e04e671e68aef2c81e4ca576239a71385014d63a93f15a6a2ca81ed616d328d527c906ce31b361af794fd465ea073a04bc3059f18850d79fffb079f0a776597735202b70e92d342f13694e28366b3389e48bd7c60cf731ed07a1a5721818a84e630f4c278b5f8a522386c2a5fed2b09bd44306a37c1e59cfadbedbd64fcd4e3a08d55305a8ef37c9a75600493dcfa74d362dffa742cfb5153fadc42e9cc9a61e38dd7c7edee45898c53446ab1fb6000fbd433481957a5760eaa0780e27207d74e9536b4529c40f74d2d3c6b9a90718a9d7450cd0e4fa3e2764882fad558b5190c0a9847f4f706da7b5a202b5a6a1e25bb9b3c77364ee7f9656ef9445e28c1c4971f27579b5e3c43f80cacfc3598553c23b0b6dd3695cf7ff56a6b7517fbdfa942688207fb9b2fb2b1572d6575ba19a4ae44b302760db6079a1b7ca70435774baf73ebd19dcdc8b4e4479c4358e45b17da2c0d7cfb50a62ea4d67516b34ddae7e67261e4be64eb727d71a54d6f9f2f5fdd8a9c634eecaa1db6d90d5f75501cf3afb8a53b0298bed8b343d30d2568d658b8dbc1ef553aa2f8b19767e7be08ab154b17cf14ebf259af6c36f92962434cf20163455b75f0caae0e31d63486f1ada6e20e916fd30f7116dc0c4b1aa104566f28c6fcc305199bc719e170abb6830e5c06a21fe31fcdeda8679ddd8e9a83aa21373dcf466c5190b465e49bc8186efbb3eeeeb1fca91e55331c79bc6c1c7054759d0db5114aacbadabc1ace7860666701eb220b872d64aeb6f8b33a70ecb35b46be76af90d3d4e924db737678cc609c639c19c6616567da22a52b7d2824fade8e99e1c5d2014287e78c260ed28dfe23e92cc0ade3f7ea8d38137f3de7406a516ff923d61b13d41b8e4cff5f06aa921c71cc7df78f7e850791b2a42f6c0fe90068c6a547bdb01002aec3cad2ed749b0049bacb92d082388da42f5679fb4e6131395df8943fd46f113a29869e1aaafcc823230635be017ea5fce66a6c3611a1fb6aeb2268c921b89c6bf2c9b9b00785e806ec7df757520886364c79e61478b107e1cee6ac84000b2f319343d0c75b24e58daf0f05bd24b1eb1d07aa4f5dc3787fe7882236db545e8463ed13faaede2457a31ad3b217bd8ba3f807e8866908d1e104764bef19c6d157250f8bae0fd9a1dc674146bea497eabf648f0b9ed0e2da8657fed8810ca04d613f919e6fdb50f6bf659dc14961303d8"}) (async)
ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f0000000040)={0x3, 0x0, [0xccd3, 0x0, 0x5, 0x2, 0xe8, 0x1, 0x8001, 0x100]}) (async)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b5b0707000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000dd479b75a82927ef445e32003a3d8700000000003800000000000000000000000000000000000000000000000000a7071d713302310a00"/135], 0x78) (async)

[ 1644.096385][T25793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1644.130708][T25794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:45 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x900, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:45 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x11000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:45 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x3}]}, 0x78)

02:42:45 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x1000000)

02:42:45 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xa00, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:45 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x7}]}, 0x78)

02:42:45 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x1d000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:45 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 32)
r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (rerun: 32)
r2 = fcntl$dupfd(r1, 0x0, r0) (async)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00') (async)
mkdirat(r3, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r3, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f00000002c0)='./file0/file0\x00', 0x0) (async)
r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f00000000c0)='./file0\x00') (async)
renameat2(r4, &(0x7f0000001680)='./file0/file0\x00', r3, &(0x7f00000016c0)='./file0\x00', 0x0) (async)
ioctl$NBD_SET_SOCK(r3, 0xab00, r2) (async)
ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0xc, 0x15, 0xb9, &(0x7f0000000440)="6196165fd91132011e4574178679c50b70f761294536f5ae87dea8c04ab8242cf9df4851794fb9fae417c1e21c4be246c99ad8b694197ed148195c93326b021d8165b13145d62d8122bb3d866a5e9e3016cae6812c1db6430ceacaefe5ac0503e18f788bdd01577ab5f670524370edbe95e0528b21f5b66fae249f76b81ae62f1cc7c9d9161bb8de699175e3251f62fa4ca1ec731b7463a953f9e04e671e68aef2c81e4ca576239a71385014d63a93f15a6a2ca81ed616d328d527c906ce31b361af794fd465ea073a04bc3059f18850d79fffb079f0a776597735202b70e92d342f13694e28366b3389e48bd7c60cf731ed07a1a5721818a84e630f4c278b5f8a522386c2a5fed2b09bd44306a37c1e59cfadbedbd64fcd4e3a08d55305a8ef37c9a75600493dcfa74d362dffa742cfb5153fadc42e9cc9a61e38dd7c7edee45898c53446ab1fb6000fbd433481957a5760eaa0780e27207d74e9536b4529c40f74d2d3c6b9a90718a9d7450cd0e4fa3e2764882fad558b5190c0a9847f4f706da7b5a202b5a6a1e25bb9b3c77364ee7f9656ef9445e28c1c4971f27579b5e3c43f80cacfc3598553c23b0b6dd3695cf7ff56a6b7517fbdfa942688207fb9b2fb2b1572d6575ba19a4ae44b302760db6079a1b7ca70435774baf73ebd19dcdc8b4e4479c4358e45b17da2c0d7cfb50a62ea4d67516b34ddae7e67261e4be64eb727d71a54d6f9f2f5fdd8a9c634eecaa1db6d90d5f75501cf3afb8a53b0298bed8b343d30d2568d658b8dbc1ef553aa2f8b19767e7be08ab154b17cf14ebf259af6c36f92962434cf20163455b75f0caae0e31d63486f1ada6e20e916fd30f7116dc0c4b1aa104566f28c6fcc305199bc719e170abb6830e5c06a21fe31fcdeda8679ddd8e9a83aa21373dcf466c5190b465e49bc8186efbb3eeeeb1fca91e55331c79bc6c1c7054759d0db5114aacbadabc1ace7860666701eb220b872d64aeb6f8b33a70ecb35b46be76af90d3d4e924db737678cc609c639c19c6616567da22a52b7d2824fade8e99e1c5d2014287e78c260ed28dfe23e92cc0ade3f7ea8d38137f3de7406a516ff923d61b13d41b8e4cff5f06aa921c71cc7df78f7e850791b2a42f6c0fe90068c6a547bdb01002aec3cad2ed749b0049bacb92d082388da42f5679fb4e6131395df8943fd46f113a29869e1aaafcc823230635be017ea5fce66a6c3611a1fb6aeb2268c921b89c6bf2c9b9b00785e806ec7df757520886364c79e61478b107e1cee6ac84000b2f319343d0c75b24e58daf0f05bd24b1eb1d07aa4f5dc3787fe7882236db545e8463ed13faaede2457a31ad3b217bd8ba3f807e8866908d1e104764bef19c6d157250f8bae0fd9a1dc674146bea497eabf648f0b9ed0e2da8657fed8810ca04d613f919e6fdb50f6bf659dc14961303d8"})
ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f0000000040)={0x3, 0x0, [0xccd3, 0x0, 0x5, 0x2, 0xe8, 0x1, 0x8001, 0x100]})
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b5b0707000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000dd479b75a82927ef445e32003a3d8700000000003800000000000000000000000000000000000000000000000000a7071d713302310a00"/135], 0x78)

02:42:45 executing program 2:
r0 = open(&(0x7f0000000000)='.\x00', 0x218301, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00')
mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f00000002c0)='./file0/file0\x00', 0x0)
r1 = open(&(0x7f0000000340)='\x00', 0x80000, 0x2f8)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
renameat2(r1, &(0x7f0000001680)='./file0/file0\x00', r0, &(0x7f00000016c0)='./file0\x00', 0x0)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0x34)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x8000, 0x103)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00')
renameat2(0xffffffffffffffff, &(0x7f0000001680)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f00000016c0)='./file0\x00', 0x0)
sendmsg$nl_route(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=@bridge_delvlan={0x58, 0x71, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x10}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x8, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x1004}, 0xc040)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00')
mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f00000002c0)='./file0/file0\x00', 0x0)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00')
renameat2(r3, &(0x7f0000001680)='./file0/file0\x00', r2, &(0x7f00000016c0)='./file0\x00', 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200088e5, 0x0, 0x0)

02:42:45 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb00, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:45 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x8}]}, 0x78)

[ 1644.588467][T25924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:45 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc00, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:45 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b5b073e346a32cbbc900700000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000003800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000"], 0x78)

02:42:45 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x9}]}, 0x78)

02:42:45 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x21020000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:45 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x2000000)

02:42:45 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xd00, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:45 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b5b073e346a32cbbc900700000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000003800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000"], 0x78)

02:42:46 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0xa}]}, 0x78)

02:42:46 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe00, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:46 executing program 2:
r0 = open(&(0x7f0000000000)='.\x00', 0x218301, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') (async, rerun: 64)
mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async, rerun: 64)
renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f00000002c0)='./file0/file0\x00', 0x0) (async, rerun: 32)
r1 = open(&(0x7f0000000340)='\x00', 0x80000, 0x2f8) (rerun: 32)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') (async)
renameat2(r1, &(0x7f0000001680)='./file0/file0\x00', r0, &(0x7f00000016c0)='./file0\x00', 0x0)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0x34) (async)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x8000, 0x103)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') (async, rerun: 32)
renameat2(0xffffffffffffffff, &(0x7f0000001680)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f00000016c0)='./file0\x00', 0x0) (async, rerun: 32)
sendmsg$nl_route(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=@bridge_delvlan={0x58, 0x71, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x10}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x8, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x1004}, 0xc040) (async)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') (async)
mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f00000002c0)='./file0/file0\x00', 0x0)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00') (async, rerun: 32)
renameat2(r3, &(0x7f0000001680)='./file0/file0\x00', r2, &(0x7f00000016c0)='./file0\x00', 0x0) (async, rerun: 32)
sendto$inet(r3, 0x0, 0x0, 0x200088e5, 0x0, 0x0)

02:42:46 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0xc}]}, 0x78)

02:42:46 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x30010000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:46 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0xd}]}, 0x78)

02:42:46 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf00, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:46 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b5b073e346a32cbbc900700000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000003800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000"], 0x78)

[ 1645.157347][T26133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:46 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1800, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:46 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x3000000)

02:42:46 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0xe}]}, 0x78)

02:42:46 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x32010000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:46 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a00, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:46 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0xf}]}, 0x78)

02:42:46 executing program 2:
r0 = open(&(0x7f0000000000)='.\x00', 0x218301, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00')
mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f00000002c0)='./file0/file0\x00', 0x0)
r1 = open(&(0x7f0000000340)='\x00', 0x80000, 0x2f8)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
renameat2(r1, &(0x7f0000001680)='./file0/file0\x00', r0, &(0x7f00000016c0)='./file0\x00', 0x0)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0x34)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x8000, 0x103)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00')
renameat2(0xffffffffffffffff, &(0x7f0000001680)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f00000016c0)='./file0\x00', 0x0)
sendmsg$nl_route(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=@bridge_delvlan={0x58, 0x71, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x10}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x8, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x1004}, 0xc040)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00')
mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f00000002c0)='./file0/file0\x00', 0x0)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00')
renameat2(r3, &(0x7f0000001680)='./file0/file0\x00', r2, &(0x7f00000016c0)='./file0\x00', 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200088e5, 0x0, 0x0)
open(&(0x7f0000000000)='.\x00', 0x218301, 0x0) (async)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') (async)
mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async)
renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f00000002c0)='./file0/file0\x00', 0x0) (async)
open(&(0x7f0000000340)='\x00', 0x80000, 0x2f8) (async)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') (async)
renameat2(r1, &(0x7f0000001680)='./file0/file0\x00', r0, &(0x7f00000016c0)='./file0\x00', 0x0) (async)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0x34) (async)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x8000, 0x103) (async)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') (async)
renameat2(0xffffffffffffffff, &(0x7f0000001680)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f00000016c0)='./file0\x00', 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=@bridge_delvlan={0x58, 0x71, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x10}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x8, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x1004}, 0xc040) (async)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') (async)
mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async)
renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f00000002c0)='./file0/file0\x00', 0x0) (async)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00') (async)
renameat2(r3, &(0x7f0000001680)='./file0/file0\x00', r2, &(0x7f00000016c0)='./file0\x00', 0x0) (async)
sendto$inet(r3, 0x0, 0x0, 0x200088e5, 0x0, 0x0) (async)

02:42:46 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x40000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:46 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b00, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:46 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x1, 0xc7, 0x1, 0x0, 0x7, 0x0, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x7}, 0x19070, 0x3ff, 0x1000, 0x4, 0x7, 0x0, 0x200, 0x0, 0x4, 0x0, 0x6}, r1, 0x2, 0xffffffffffffffff, 0x1)
r3 = getpgrp(r1)
perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1, 0x0, 0x8, 0x3f, 0x0, 0x3, 0x40200, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0xa}, 0x890, 0x800, 0x8, 0x5, 0xf59, 0x0, 0x6, 0x0, 0x1, 0x0, 0xffffffffffff8000}, r3, 0xc, r2, 0x2)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)

02:42:46 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x18}]}, 0x78)

02:42:46 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
r1 = getpid()
r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x1, 0xc7, 0x1, 0x0, 0x7, 0x0, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x7}, 0x19070, 0x3ff, 0x1000, 0x4, 0x7, 0x0, 0x200, 0x0, 0x4, 0x0, 0x6}, r1, 0x2, 0xffffffffffffffff, 0x1) (async)
r3 = getpgrp(r1)
perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1, 0x0, 0x8, 0x3f, 0x0, 0x3, 0x40200, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0xa}, 0x890, 0x800, 0x8, 0x5, 0xf59, 0x0, 0x6, 0x0, 0x1, 0x0, 0xffffffffffff8000}, r3, 0xc, r2, 0x2) (async)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)

02:42:46 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x1a}]}, 0x78)

02:42:46 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x4000000)

02:42:46 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3e00, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

[ 1645.675955][T26293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:46 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b00, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:46 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x45000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:46 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x1b}]}, 0x78)

02:42:46 executing program 2:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)

02:42:47 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7800, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:47 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x1, 0xc7, 0x1, 0x0, 0x7, 0x0, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x7}, 0x19070, 0x3ff, 0x1000, 0x4, 0x7, 0x0, 0x200, 0x0, 0x4, 0x0, 0x6}, r1, 0x2, 0xffffffffffffffff, 0x1)
r3 = getpgrp(r1)
perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1, 0x0, 0x8, 0x3f, 0x0, 0x3, 0x40200, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0xa}, 0x890, 0x800, 0x8, 0x5, 0xf59, 0x0, 0x6, 0x0, 0x1, 0x0, 0xffffffffffff8000}, r3, 0xc, r2, 0x2)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
getpid() (async)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x1, 0xc7, 0x1, 0x0, 0x7, 0x0, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x7}, 0x19070, 0x3ff, 0x1000, 0x4, 0x7, 0x0, 0x200, 0x0, 0x4, 0x0, 0x6}, r1, 0x2, 0xffffffffffffffff, 0x1) (async)
getpgrp(r1) (async)
perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1, 0x0, 0x8, 0x3f, 0x0, 0x3, 0x40200, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0xa}, 0x890, 0x800, 0x8, 0x5, 0xf59, 0x0, 0x6, 0x0, 0x1, 0x0, 0xffffffffffff8000}, r3, 0xc, r2, 0x2) (async)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) (async)

02:42:47 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x3e}]}, 0x78)

[ 1645.909042][T26423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:47 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7f00, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

[ 1645.985471][ T3749] Bluetooth: hci3: command 0x0419 tx timeout
02:42:47 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x57020000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:47 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x5000000)

02:42:47 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x9b}]}, 0x78)

02:42:47 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, 0x78)

02:42:47 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x9b00, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:47 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:47 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, 0x78)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, 0x78) (async)

02:42:47 executing program 2:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)

02:42:47 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf00000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:47 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0xf0}]}, 0x78)

02:42:47 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x5c030000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:47 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:47 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x180}]}, 0x78)

[ 1646.376441][T26622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:47 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x6000000)

02:42:47 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x300}]}, 0x78)

02:42:47 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, 0x78)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, 0x78) (async)

02:42:47 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1800000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:47 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x82010000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:47 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x700}]}, 0x78)

02:42:47 executing program 2:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)

02:42:47 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:47 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x900}]}, 0x78)

02:42:47 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000000), 0x3, 0x2)
r2 = fsmount(0xffffffffffffffff, 0x0, 0xfa)
getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14)
ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000040)={0xfffffff8, 0x8, 0x0, 0x7f})
write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x78)

02:42:47 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x88000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:47 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x7000000)

02:42:48 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000000), 0x3, 0x2)
r2 = fsmount(0xffffffffffffffff, 0x0, 0xfa)
getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14)
ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000040)={0xfffffff8, 0x8, 0x0, 0x7f})
write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x78)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
syz_open_dev$cec(&(0x7f0000000000), 0x3, 0x2) (async)
fsmount(0xffffffffffffffff, 0x0, 0xfa) (async)
getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) (async)
ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000040)={0xfffffff8, 0x8, 0x0, 0x7f}) (async)
write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x78) (async)

02:42:48 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0xa00}]}, 0x78)

02:42:48 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

[ 1646.911266][T26787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:48 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:48 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0xc00}]}, 0x78)

02:42:48 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x92030000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:48 executing program 2:
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00')
mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f00000002c0)='./file0/file0\x00', 0x0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
renameat2(r1, &(0x7f0000001680)='./file0/file0\x00', r0, &(0x7f00000016c0)='./file0\x00', 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
symlinkat(&(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00')
r3 = syz_open_dev$audion(&(0x7f0000000280), 0xfffffffffffffffe, 0x1)
socketpair(0x2, 0x80000, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x3e9f5000)
renameat2(r2, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f0000000300)='./file0/file0/file0\x00', 0x1)
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000880)=ANY=[@ANYRESHEX=0x0, @ANYRES64=r0, @ANYRES16=r1, @ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="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", @ANYRESHEX=r0, @ANYRESHEX=r1, @ANYRES64=r1], 0x34)

02:42:48 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0xd00}]}, 0x78)

02:42:48 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
r1 = syz_open_dev$cec(&(0x7f0000000000), 0x3, 0x2) (async, rerun: 64)
r2 = fsmount(0xffffffffffffffff, 0x0, 0xfa) (rerun: 64)
getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14)
ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000040)={0xfffffff8, 0x8, 0x0, 0x7f})
write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b5b0707000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000038000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d9606373741f1dd15cb9cd6c43ee33f8550afff40b8e0e5e0982d4b2aca31b6874c54de4b364035962619887544ba57e7de6c262f7ed1c8d06fb716bb024d70f5898dfbfac9a7c5e23af8eb43cc4cfd999ed438f1c646ad8ced7a4922fe5415674d7a11143fee1cbe777db73f8210513e41057e98ee83e9e755c1576148aecff98c255e29c8f6dd8b8f1c86b571253bc84428c0cd28b13a370bf300d9c1ef47a60f34bc0bb4d2798500a5a554ace"], 0x78)

02:42:48 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x8000000)

02:42:48 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:48 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x96010000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:48 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:48 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0xe00}]}, 0x78)

02:42:48 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

[ 1647.434759][T27008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:48 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0xcb030000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:48 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}]}, 0x78)

02:42:48 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0xf00}]}, 0x78)

02:42:49 executing program 2:
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00')
mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f00000002c0)='./file0/file0\x00', 0x0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
renameat2(r1, &(0x7f0000001680)='./file0/file0\x00', r0, &(0x7f00000016c0)='./file0\x00', 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
symlinkat(&(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00')
r3 = syz_open_dev$audion(&(0x7f0000000280), 0xfffffffffffffffe, 0x1)
socketpair(0x2, 0x80000, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x3e9f5000)
renameat2(r2, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f0000000300)='./file0/file0/file0\x00', 0x1)
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000880)=ANY=[@ANYRESHEX=0x0, @ANYRES64=r0, @ANYRES16=r1, @ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="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", @ANYRESHEX=r0, @ANYRESHEX=r1, @ANYRES64=r1], 0x34)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') (async)
mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async)
renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f00000002c0)='./file0/file0\x00', 0x0) (async)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') (async)
renameat2(r1, &(0x7f0000001680)='./file0/file0\x00', r0, &(0x7f00000016c0)='./file0\x00', 0x0) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) (async)
symlinkat(&(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') (async)
syz_open_dev$audion(&(0x7f0000000280), 0xfffffffffffffffe, 0x1) (async)
socketpair(0x2, 0x80000, 0x0, &(0x7f0000000340)) (async)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x3e9f5000) (async)
renameat2(r2, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f0000000300)='./file0/file0/file0\x00', 0x1) (async)
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000880)=ANY=[@ANYRESHEX=0x0, @ANYRES64=r0, @ANYRES16=r1, @ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="1589d3e2ac1c8f5390cf16825f0fe549320000000000000e60a19068bf11d1c9aa4de880a5ab03002c605cd0d7010000000431e108f3f48b555206a4e08ce0c9a4eaae6655a7ea2bd831818b6c73d7a7d4a49de98fb8868c56e35f7651d642f960604c80bfa8d58a62e987dd1b16f96ce261cb3ef36f7030b70fef64134e923e38779ab3f1eb8fdff825d5d54c7e99faa0452c1527eaafa72ddb413ec5553c6722d26fbd0f0000000000009cfbc52b6a91ead584aeff1ace0ee677a9a167ad88a39f17236302fc0244c372bda95a79402e3ea34568122da00b8b08d7b341920989d88c8bd718028f9367cae8f0cafb7d0284ff8c0b3efe89b0fcef9ba8cc1e411603d3209661d8cd8dc1377a8ff6fadf662c9bada3cc0880171c3cab3b835264d01aeaa2764a22777e84fc84d828c54ac55796d77a2bf3c260cde8259fe24855a90b7d5a3f66e7654bb3d145826315bc1f7af7f8f5de59909427689bbd051abb2622e811fda1104f9d4eea930efaec0cdf628e98e75d20e2647b8b9608c05cc1688f73b662dca446f077783fdf52cc5aa6854aea451e88de9ecc3aabc6c574f3626e7841da07d905ca85cfedd6cb535f30e7da332e295dd05421471ee2667a0fd121ef3dbafda0fe87551d443fd5b15aa655ede429f6d47b99049d88bc4c7a95a7706815fdba7bca7cbdde49cc25eae441acdee83bebc8e9a18db5d5c87be4ec17852770f790150370d2756b3e151d11edbf25d440e20d01166469c28da7a1e6e643adb42b6fdb4aa35fe06dbfb93596b0219ff2a98413dacc99f6c5d35ca19bdd3976f787bb7cd793d023b0bdd7c9f2c4236e4d04ef14921138117eb419aca7d1fd08dc27dc7487fc594894699fcbcd4414de933d17e8796577a79d78c9753514a55c02da841f46c7942bba4a7075c6", @ANYRESHEX=r0, @ANYRESHEX=r1, @ANYRES64=r1], 0x34) (async)

02:42:49 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x9000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:49 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x1800}]}, 0x78)

02:42:49 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}]}, 0x78)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}]}, 0x78) (async)

02:42:49 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x9000000)

02:42:49 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0xd2030000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:49 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xa000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:49 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x1a00}]}, 0x78)

02:42:49 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0xdd010000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

[ 1648.082795][T27099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:49 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

[ 1648.154847][T27138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:49 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}]}, 0x78)

02:42:49 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x1b00}]}, 0x78)

02:42:49 executing program 2:
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00')
mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f00000002c0)='./file0/file0\x00', 0x0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
renameat2(r1, &(0x7f0000001680)='./file0/file0\x00', r0, &(0x7f00000016c0)='./file0\x00', 0x0) (async, rerun: 32)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) (rerun: 32)
symlinkat(&(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') (async)
r3 = syz_open_dev$audion(&(0x7f0000000280), 0xfffffffffffffffe, 0x1) (async, rerun: 64)
socketpair(0x2, 0x80000, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r4=>0xffffffffffffffff}) (rerun: 64)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x3e9f5000)
renameat2(r2, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f0000000300)='./file0/file0/file0\x00', 0x1) (async)
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000880)=ANY=[@ANYRESHEX=0x0, @ANYRES64=r0, @ANYRES16=r1, @ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="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", @ANYRESHEX=r0, @ANYRESHEX=r1, @ANYRES64=r1], 0x34)

02:42:49 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0xe000000)

02:42:49 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:49 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0xea030000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:49 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x3e00}]}, 0x78)

02:42:49 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xd000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:49 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000000))
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x7fffffff, 0x0, 0x7}, 0x10)
sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext={0x0, 0x8a0b}, 0x0, 0x40, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1b5b070700000008000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000003800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4e2b80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffe0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056ff00"/2677], 0xa78)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00')
mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f00000002c0)='./file0/file0\x00', 0x0)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00')
renameat2(r3, &(0x7f0000001680)='./file0/file0\x00', r2, &(0x7f00000016c0)='./file0\x00', 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200088e5, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1, 0xde, 0x1, 0xff, 0x0, 0x8, 0x20, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x1, 0x6}, 0x46701ce3169868e, 0x1000, 0x8001, 0x3, 0x3, 0x4, 0x2, 0x0, 0xfff, 0x0, 0x2}, 0xffffffffffffffff, 0x5, r3, 0x9)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000040)={0x2, 0x1, 0xa, 0x10, 0x114, &(0x7f0000000440)="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"})

02:42:49 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x4000}]}, 0x78)

[ 1648.548190][T27240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:49 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:49 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0xec010000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:49 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x7f00}]}, 0x78)

02:42:49 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0xf000000)

02:42:50 executing program 2:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="c0b04f00080211000001ffffffffffff0802110000018600cada1bc553b0db17087b4bf78e09840013003bb0e0d24f8d17b908c2a8c44244e84b503d560de207821d3b75b770e0e63c4c9c81edaa941d7cd2a6c2f61bafc27cf7828fb73816d0bb7d30ee9aea3ddb0483068372245d39c4020fa2b05a299db6b1bdad34bf23b0b42c54a2770576aa1808adb6294ecc792e49a4bc472ef3950db40bc5000258c768483d9c0fc5bee7f83112dd4a8dcdd4c96e21591660f052d41affbae455cdab9c11e17f9ec21c6e7be0d46cbcb9e8baa44c207b8c1babf963ab432738b7c6077f53896db471026a77e9679801b4ef8153843ac2cd65e517546cccbf932f62c3e735e1af5a139f15f5030b12ba299c71f7ccb38645cdf5361e140a36b421d6ea"], 0x1e)

02:42:50 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:50 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x9b00}]}, 0x78)

02:42:50 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x1000000000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:50 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x11000000)

02:42:50 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:50 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000000))
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x7fffffff, 0x0, 0x7}, 0x10)
sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext={0x0, 0x8a0b}, 0x0, 0x40, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1b5b070700000008000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000003800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4e2b80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffe0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056ff00"/2677], 0xa78)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00')
mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f00000002c0)='./file0/file0\x00', 0x0)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00')
renameat2(r3, &(0x7f0000001680)='./file0/file0\x00', r2, &(0x7f00000016c0)='./file0\x00', 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200088e5, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1, 0xde, 0x1, 0xff, 0x0, 0x8, 0x20, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x1, 0x6}, 0x46701ce3169868e, 0x1000, 0x8001, 0x3, 0x3, 0x4, 0x2, 0x0, 0xfff, 0x0, 0x2}, 0xffffffffffffffff, 0x5, r3, 0x9)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000040)={0x2, 0x1, 0xa, 0x10, 0x114, &(0x7f0000000440)="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"})
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000000)) (async)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socket(0x1e, 0x4, 0x0) (async)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x7fffffff, 0x0, 0x7}, 0x10) (async)
sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext={0x0, 0x8a0b}, 0x0, 0x40, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
write$binfmt_elf64(r0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1b5b070700000008000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000003800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4e2b80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffe0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056ff00"/2677], 0xa78) (async)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') (async)
mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async)
renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f00000002c0)='./file0/file0\x00', 0x0) (async)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00') (async)
renameat2(r3, &(0x7f0000001680)='./file0/file0\x00', r2, &(0x7f00000016c0)='./file0\x00', 0x0) (async)
sendto$inet(r3, 0x0, 0x0, 0x200088e5, 0x0, 0x0) (async)
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1, 0xde, 0x1, 0xff, 0x0, 0x8, 0x20, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x1, 0x6}, 0x46701ce3169868e, 0x1000, 0x8001, 0x3, 0x3, 0x4, 0x2, 0x0, 0xfff, 0x0, 0x2}, 0xffffffffffffffff, 0x5, r3, 0x9) (async)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000040)={0x2, 0x1, 0xa, 0x10, 0x114, &(0x7f0000000440)="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"}) (async)

02:42:50 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0xf000}]}, 0x78)

02:42:50 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x2000000000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

[ 1649.736168][T27431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1649.799086][T27434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:51 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:51 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x400000}]}, 0x78)

02:42:51 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x12000000)

02:42:51 executing program 2:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1e)

02:42:51 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:51 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x4000000000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:51 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0xf00000}]}, 0x78)

[ 1650.248249][T27554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:51 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3e000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:51 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x14000000)

[ 1650.293972][T27559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:51 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000000))
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x7fffffff, 0x0, 0x7}, 0x10)
sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext={0x0, 0x8a0b}, 0x0, 0x40, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1b5b070700000008000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000003800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4e2b80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffe0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056ff00"/2677], 0xa78)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00')
mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f00000002c0)='./file0/file0\x00', 0x0)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00')
renameat2(r3, &(0x7f0000001680)='./file0/file0\x00', r2, &(0x7f00000016c0)='./file0\x00', 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200088e5, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1, 0xde, 0x1, 0xff, 0x0, 0x8, 0x20, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x1, 0x6}, 0x46701ce3169868e, 0x1000, 0x8001, 0x3, 0x3, 0x4, 0x2, 0x0, 0xfff, 0x0, 0x2}, 0xffffffffffffffff, 0x5, r3, 0x9)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000040)={0x2, 0x1, 0xa, 0x10, 0x114, &(0x7f0000000440)="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"})
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000000)) (async)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socket(0x1e, 0x4, 0x0) (async)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x7fffffff, 0x0, 0x7}, 0x10) (async)
sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext={0x0, 0x8a0b}, 0x0, 0x40, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
write$binfmt_elf64(r0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1b5b070700000008000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000003800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4e2b80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffe0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056ff00"/2677], 0xa78) (async)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') (async)
mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async)
renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f00000002c0)='./file0/file0\x00', 0x0) (async)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00') (async)
renameat2(r3, &(0x7f0000001680)='./file0/file0\x00', r2, &(0x7f00000016c0)='./file0\x00', 0x0) (async)
sendto$inet(r3, 0x0, 0x0, 0x200088e5, 0x0, 0x0) (async)
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1, 0xde, 0x1, 0xff, 0x0, 0x8, 0x20, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x1, 0x6}, 0x46701ce3169868e, 0x1000, 0x8001, 0x3, 0x3, 0x4, 0x2, 0x0, 0xfff, 0x0, 0x2}, 0xffffffffffffffff, 0x5, r3, 0x9) (async)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000040)={0x2, 0x1, 0xa, 0x10, 0x114, &(0x7f0000000440)="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"}) (async)

02:42:51 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x1000000}]}, 0x78)

02:42:51 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:51 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x100000000000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:51 executing program 2:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1e)

02:42:51 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x15000000)

[ 1650.818601][T27570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1650.856312][T27570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:52 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x1800000}]}, 0x78)

02:42:52 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x78000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:52 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x200000000000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:52 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7f000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:52 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x2000000}]}, 0x78)

02:42:52 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x16000000)

02:42:52 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2082, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4000)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)

02:42:52 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x3000000}]}, 0x78)

02:42:52 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x80ffffff, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:52 executing program 2:
ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000080))
r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x4, 0x6, 0x5, 0x0, 0x100000000, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80, 0x0, @perf_config_ext={0x2}, 0x2, 0x281, 0xfffffffb, 0x9, 0x86, 0x9, 0x4, 0x0, 0x1, 0x0, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x1)
ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000))
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)

02:42:52 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x300000000000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:52 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x17000000)

02:42:52 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x9b000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

[ 1651.735566][T27698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:52 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x7000000}]}, 0x78)

02:42:52 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2082, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4000) (async)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)

02:42:53 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xffffff80, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:53 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x400000000000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:53 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x8000000}]}, 0x78)

02:42:53 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf0000000000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:53 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x18000000)

02:42:53 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x9000000}]}, 0x78)

02:42:53 executing program 2:
ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000080))
r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x4, 0x6, 0x5, 0x0, 0x100000000, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80, 0x0, @perf_config_ext={0x2}, 0x2, 0x281, 0xfffffffb, 0x9, 0x86, 0x9, 0x4, 0x0, 0x1, 0x0, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x1) (async)
ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000))
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)

02:42:53 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2082, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4000) (async)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)

02:42:53 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x500000000000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:53 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x100000000000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:53 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0xa000000}]}, 0x78)

[ 1652.203084][T27856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:53 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x4, 0x6, 0x5, 0x0, 0x100000000, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80, 0x0, @perf_config_ext={0x2}, 0x2, 0x281, 0xfffffffb, 0x9, 0x86, 0x9, 0x4, 0x0, 0x1, 0x0, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0x1)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000000))
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x1}]}, 0x78)

02:42:53 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x180000000000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:53 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x600000000000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:53 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0xc000000}]}, 0x78)

02:42:53 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x200000000000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:53 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x19000000)

02:42:53 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x300000000000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:53 executing program 2:
ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000080))
r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x4, 0x6, 0x5, 0x0, 0x100000000, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80, 0x0, @perf_config_ext={0x2}, 0x2, 0x281, 0xfffffffb, 0x9, 0x86, 0x9, 0x4, 0x0, 0x1, 0x0, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x1) (async)
ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000))
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)

02:42:53 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x4, 0x6, 0x5, 0x0, 0x100000000, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80, 0x0, @perf_config_ext={0x2}, 0x2, 0x281, 0xfffffffb, 0x9, 0x86, 0x9, 0x4, 0x0, 0x1, 0x0, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0x1) (async)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000000))
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x1}]}, 0x78)

02:42:53 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0xd000000}]}, 0x78)

02:42:53 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x500000000000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:53 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x700000000000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:53 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0xe000000}]}, 0x78)

02:42:53 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x600000000000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

[ 1652.652649][T27992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:53 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0xf000000}]}, 0x78)

02:42:53 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x4, 0x6, 0x5, 0x0, 0x100000000, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80, 0x0, @perf_config_ext={0x2}, 0x2, 0x281, 0xfffffffb, 0x9, 0x86, 0x9, 0x4, 0x0, 0x1, 0x0, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0x1)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000000))
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x1}]}, 0x78)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async)
fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x4, 0x6, 0x5, 0x0, 0x100000000, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80, 0x0, @perf_config_ext={0x2}, 0x2, 0x281, 0xfffffffb, 0x9, 0x86, 0x9, 0x4, 0x0, 0x1, 0x0, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0x1) (async)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000000)) (async)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x1}]}, 0x78) (async)

02:42:53 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x700000000000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:53 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x1a000000)

02:42:53 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x800000000000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:54 executing program 2:
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x4, 0x100000000, 0x7f})
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)

02:42:54 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x18000000}]}, 0x78)

02:42:54 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x800000000000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:54 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x10101, 0x0)
ioctl$TIOCCONS(r1, 0x541d)
r2 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x12280, 0x83, 0x1}, 0x18)
ioctl$TCXONC(r2, 0x540a, 0x1)
ioctl$TCSETS2(r1, 0x402c542b, &(0x7f00000000c0)={0x4, 0xcd13, 0x51, 0x0, 0x29, "4b52fb34fa543a809ca1dc779216213febb327", 0x4, 0x6})
r3 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x3000, 0xfffffffffffffffd}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1)
dup(r3)
sendmsg$nl_generic(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"/1016], 0x3f8}, 0x1, 0x0, 0x0, 0x48000}, 0x8004)
close(r0)

02:42:54 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0xc00000000000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:54 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x900000000000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:54 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x1a000000}]}, 0x78)

02:42:54 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x10101, 0x0)
ioctl$TIOCCONS(r1, 0x541d)
r2 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x12280, 0x83, 0x1}, 0x18)
ioctl$TCXONC(r2, 0x540a, 0x1)
ioctl$TCSETS2(r1, 0x402c542b, &(0x7f00000000c0)={0x4, 0xcd13, 0x51, 0x0, 0x29, "4b52fb34fa543a809ca1dc779216213febb327", 0x4, 0x6})
r3 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x3000, 0xfffffffffffffffd}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1)
dup(r3)
sendmsg$nl_generic(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"/1016], 0x3f8}, 0x1, 0x0, 0x0, 0x48000}, 0x8004)
close(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x10101, 0x0) (async)
ioctl$TIOCCONS(r1, 0x541d) (async)
openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x12280, 0x83, 0x1}, 0x18) (async)
ioctl$TCXONC(r2, 0x540a, 0x1) (async)
ioctl$TCSETS2(r1, 0x402c542b, &(0x7f00000000c0)={0x4, 0xcd13, 0x51, 0x0, 0x29, "4b52fb34fa543a809ca1dc779216213febb327", 0x4, 0x6}) (async)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x3000, 0xfffffffffffffffd}, 0x0, 0x2, 0xffffffffffffffff, 0x0) (async)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) (async)
dup(r3) (async)
sendmsg$nl_generic(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"/1016], 0x3f8}, 0x1, 0x0, 0x0, 0x48000}, 0x8004) (async)
close(r0) (async)

[ 1653.098178][T28192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:54 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x1b000000)

02:42:54 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x1002000000000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:54 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xa00000000000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:54 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x1b000000}]}, 0x78)

02:42:54 executing program 2:
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x4, 0x100000000, 0x7f}) (async)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)

02:42:54 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x3e000000}]}, 0x78)

02:42:54 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x10101, 0x0)
ioctl$TIOCCONS(r1, 0x541d)
r2 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x12280, 0x83, 0x1}, 0x18)
ioctl$TCXONC(r2, 0x540a, 0x1)
ioctl$TCSETS2(r1, 0x402c542b, &(0x7f00000000c0)={0x4, 0xcd13, 0x51, 0x0, 0x29, "4b52fb34fa543a809ca1dc779216213febb327", 0x4, 0x6}) (async)
r3 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x3000, 0xfffffffffffffffd}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) (async)
dup(r3) (async)
sendmsg$nl_generic(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"/1016], 0x3f8}, 0x1, 0x0, 0x0, 0x48000}, 0x8004) (async)
close(r0)

02:42:54 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb00000000000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:54 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x1100000000000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:54 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x7f000000}]}, 0x78)

02:42:54 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc00000000000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

[ 1653.522295][T28350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:54 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x1c000000)

02:42:54 executing program 1:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00')
mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cgroups\x00', 0x0, 0x0)
faccessat(r1, &(0x7f0000000180)='./file0\x00', 0x1)
renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f00000002c0)='./file0/file0\x00', 0x0)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00')
renameat2(r2, &(0x7f0000001680)='./file0/file0\x00', r0, &(0x7f00000016c0)='./file0\x00', 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getpeername(r3, &(0x7f0000000300)=@hci, &(0x7f0000000280)=0x80)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x4, 0x9, 0x3, 0xf7, 0x0, 0x400, 0xa069, 0xc, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x2b483c97703aa748, 0x23, 0x5, 0x0, 0x7f, 0x3, 0xff, 0x0, 0x90, 0x0, 0x20}, 0xffffffffffffffff, 0xa, r0, 0x1)

02:42:54 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xd00000000000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:54 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x9b000000}]}, 0x78)

02:42:54 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x1d00000000000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:54 executing program 2:
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x4, 0x100000000, 0x7f}) (async)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)

02:42:54 executing program 1:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) (async)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') (async)
mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cgroups\x00', 0x0, 0x0)
faccessat(r1, &(0x7f0000000180)='./file0\x00', 0x1) (async)
renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f00000002c0)='./file0/file0\x00', 0x0) (async)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00')
renameat2(r2, &(0x7f0000001680)='./file0/file0\x00', r0, &(0x7f00000016c0)='./file0\x00', 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getpeername(r3, &(0x7f0000000300)=@hci, &(0x7f0000000280)=0x80)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x4, 0x9, 0x3, 0xf7, 0x0, 0x400, 0xa069, 0xc, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x2b483c97703aa748, 0x23, 0x5, 0x0, 0x7f, 0x3, 0xff, 0x0, 0x90, 0x0, 0x20}, 0xffffffffffffffff, 0xa, r0, 0x1)

02:42:54 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x40000000000000}]}, 0x78)

02:42:54 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe00000000000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:55 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x2102000000000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:55 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0xf0000000000000}]}, 0x78)

[ 1653.919493][T28452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:55 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf00000000000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:55 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x1d000000)

02:42:55 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x100000000000000}]}, 0x78)

02:42:55 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1800000000000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:55 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x3001000000000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:55 executing program 1:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) (async)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') (async)
mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cgroups\x00', 0x0, 0x0)
faccessat(r1, &(0x7f0000000180)='./file0\x00', 0x1) (async)
renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f00000002c0)='./file0/file0\x00', 0x0)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') (async)
renameat2(r2, &(0x7f0000001680)='./file0/file0\x00', r0, &(0x7f00000016c0)='./file0\x00', 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getpeername(r3, &(0x7f0000000300)=@hci, &(0x7f0000000280)=0x80) (async)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x4, 0x9, 0x3, 0xf7, 0x0, 0x400, 0xa069, 0xc, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x2b483c97703aa748, 0x23, 0x5, 0x0, 0x7f, 0x3, 0xff, 0x0, 0x90, 0x0, 0x20}, 0xffffffffffffffff, 0xa, r0, 0x1)

02:42:55 executing program 2:
r0 = inotify_init1(0x80800)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@deauth={@with_ht={{{}, {0x80}, @broadcast, @device_b, @random="f0c1f1c9b147", {0x1, 0x6}}, @ver_80211n={0x0, 0x7000, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, 0x2, @val={0x8c, 0x10, {0xef1, "5715d59a52b2", @short="bfb1a5430a7fa82b"}}}, 0x30)
inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0xa2000000)

02:42:55 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a00000000000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:55 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x180000000000000}]}, 0x78)

02:42:55 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x3201000000000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:55 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x200000000000000}]}, 0x78)

02:42:55 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b00000000000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

[ 1654.378677][T28671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:55 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x1e000000)

02:42:55 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b5b0707000000000000000200000000d214dae7c57f38a6ee40ca38c98b0000000000000000000000000000000040000000000000002000000000000000003800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000092fe002a5c301a1408b0303e24cf949bbb905b45d36ac3740abefdea196d6aa053d18c9290956ded46eaf2f0bf0000000000000000"], 0x78)

[ 1654.424292][T28679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:55 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x300000000000000}]}, 0x78)

02:42:55 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3e00000000000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:55 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x4000000000000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:55 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b5b0707000000000000000200000000d214dae7c57f38a6ee40ca38c98b0000000000000000000000000000000040000000000000002000000000000000003800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000092fe002a5c301a1408b0303e24cf949bbb905b45d36ac3740abefdea196d6aa053d18c9290956ded46eaf2f0bf0000000000000000"], 0x78)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async)
fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) (async)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b5b0707000000000000000200000000d214dae7c57f38a6ee40ca38c98b0000000000000000000000000000000040000000000000002000000000000000003800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000092fe002a5c301a1408b0303e24cf949bbb905b45d36ac3740abefdea196d6aa053d18c9290956ded46eaf2f0bf0000000000000000"], 0x78) (async)

02:42:55 executing program 2:
r0 = inotify_init1(0x80800)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@deauth={@with_ht={{{}, {0x80}, @broadcast, @device_b, @random="f0c1f1c9b147", {0x1, 0x6}}, @ver_80211n={0x0, 0x7000, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, 0x2, @val={0x8c, 0x10, {0xef1, "5715d59a52b2", @short="bfb1a5430a7fa82b"}}}, 0x30)
inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0xa2000000)
inotify_init1(0x80800) (async)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34) (async)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@deauth={@with_ht={{{}, {0x80}, @broadcast, @device_b, @random="f0c1f1c9b147", {0x1, 0x6}}, @ver_80211n={0x0, 0x7000, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, 0x2, @val={0x8c, 0x10, {0xef1, "5715d59a52b2", @short="bfb1a5430a7fa82b"}}}, 0x30) (async)
inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0xa2000000) (async)

02:42:55 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x700000000000000}]}, 0x78)

02:42:55 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b00000000000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:55 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x4500000000000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:55 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 32)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (rerun: 32)
fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b5b0707000000000000000200000000d214dae7c57f38a6ee40ca38c98b0000000000000000000000000000000040000000000000002000000000000000003800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000092fe002a5c301a1408b0303e24cf949bbb905b45d36ac3740abefdea196d6aa053d18c9290956ded46eaf2f0bf0000000000000000"], 0x78)

02:42:55 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x1f000000)

02:42:55 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7800000000000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

[ 1654.888727][T28804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:56 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x800000000000000}]}, 0x78)

02:42:56 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7f00000000000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

[ 1654.939942][T28817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:56 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x900000000000000}]}, 0x78)

[ 1655.007878][T28817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:56 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x80ffffff00000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:56 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x5702000000000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

[ 1655.092690][T28855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:56 executing program 2:
r0 = inotify_init1(0x80800)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@deauth={@with_ht={{{}, {0x80}, @broadcast, @device_b, @random="f0c1f1c9b147", {0x1, 0x6}}, @ver_80211n={0x0, 0x7000, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, 0x2, @val={0x8c, 0x10, {0xef1, "5715d59a52b2", @short="bfb1a5430a7fa82b"}}}, 0x30)
inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0xa2000000)
inotify_init1(0x80800) (async)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34) (async)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@deauth={@with_ht={{{}, {0x80}, @broadcast, @device_b, @random="f0c1f1c9b147", {0x1, 0x6}}, @ver_80211n={0x0, 0x7000, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, 0x2, @val={0x8c, 0x10, {0xef1, "5715d59a52b2", @short="bfb1a5430a7fa82b"}}}, 0x30) (async)
inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0xa2000000) (async)

02:42:56 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0xa00000000000000}]}, 0x78)

02:42:56 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b5b07070000000000000000000000000000000000000000aab30040000000000000000000000000000000864dc940f27a4f1a000000000000380000000000000000180040000000000000000000000000000000000000000000000000fe0000000045b5f60b59a36ee58c930000000000ffff000000000000000062f44ded0000080000000000008c085b06c580725ccda792f7d254a712ef92eb07a98211fd2d11cabfffdb80a2aa120900000000003c3054d56ab8c445c9176983b4efd31914edec41b75a137c5e92407dc9148719fa6678f31f266123ca85811ab109977d9d41ee259e17c5390c23ba4d38b31d51a8da3c47bff192d7a5877428e15b8c95943c6e7bb0488d915add830b196f0c6b2f2b086cc9c84f4a974ecf4fba2a8cab6119f3c62d35acc55c60b1d6b20567161766ab5b75adb3a5509636929c80bda57a5f5d8e49fd2798098f6b2a2dd4d910aa8f73162c882e30ed215664a425c2e2ae89cde19adc08892b1cc4fdb4ffbbf848657ac9507f37e1724be7511f63770df62db855065f16fe66444f5671c1b923293dab9853ee9d00"/417], 0x78)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x4, 0x0, 0xff, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xd0f0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}, 0x2, 0x5f, 0x7, 0xc4f122b58a9eab8c, 0x100000000, 0x2, 0x200, 0x0, 0x5, 0x0, 0xc700000000000000}, 0xffffffffffffffff, 0x8, r1, 0x2)
syz_open_dev$tty1(0xc, 0x4, 0x4)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040))
r3 = getpid()
r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff)
r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x4, 0x6, 0x5, 0x0, 0x100000000, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80, 0x0, @perf_config_ext={0x2}, 0x2, 0x281, 0xfffffffb, 0x9, 0x86, 0x9, 0x4, 0x0, 0x1, 0x0, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0x1)
r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x420002, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, r7)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x40010, r5, 0xf36c9000)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0x2, 0x9, 0x6, 0x0, 0xff, 0x0, 0x17, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x6, @perf_bp={&(0x7f0000000000), 0x857d7c6fcdab1ff3}, 0x40, 0x1, 0x731e, 0x4, 0x8000, 0x7, 0x7f, 0x0, 0x6, 0x0, 0x8001}, r3, 0x3, 0xffffffffffffffff, 0x2)

02:42:56 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x9b00000000000000, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:56 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x20000000)

02:42:56 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x5c03000000000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:56 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0xc00000000000000}]}, 0x78)

02:42:56 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:56 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/417], 0x78)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x4, 0x0, 0xff, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xd0f0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}, 0x2, 0x5f, 0x7, 0xc4f122b58a9eab8c, 0x100000000, 0x2, 0x200, 0x0, 0x5, 0x0, 0xc700000000000000}, 0xffffffffffffffff, 0x8, r1, 0x2)
syz_open_dev$tty1(0xc, 0x4, 0x4)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040))
r3 = getpid()
r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff)
r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x4, 0x6, 0x5, 0x0, 0x100000000, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80, 0x0, @perf_config_ext={0x2}, 0x2, 0x281, 0xfffffffb, 0x9, 0x86, 0x9, 0x4, 0x0, 0x1, 0x0, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0x1)
r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x420002, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, r7)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x40010, r5, 0xf36c9000)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0x2, 0x9, 0x6, 0x0, 0xff, 0x0, 0x17, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x6, @perf_bp={&(0x7f0000000000), 0x857d7c6fcdab1ff3}, 0x40, 0x1, 0x731e, 0x4, 0x8000, 0x7, 0x7f, 0x0, 0x6, 0x0, 0x8001}, r3, 0x3, 0xffffffffffffffff, 0x2)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/417], 0x78) (async)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x4, 0x0, 0xff, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xd0f0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}, 0x2, 0x5f, 0x7, 0xc4f122b58a9eab8c, 0x100000000, 0x2, 0x200, 0x0, 0x5, 0x0, 0xc700000000000000}, 0xffffffffffffffff, 0x8, r1, 0x2) (async)
syz_open_dev$tty1(0xc, 0x4, 0x4) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) (async)
getpid() (async)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async)
fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x4, 0x6, 0x5, 0x0, 0x100000000, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80, 0x0, @perf_config_ext={0x2}, 0x2, 0x281, 0xfffffffb, 0x9, 0x86, 0x9, 0x4, 0x0, 0x1, 0x0, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0x1) (async)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x420002, 0x0) (async)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, r7) (async)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x40010, r5, 0xf36c9000) (async)
sched_setscheduler(r3, 0x5, &(0x7f0000000380)) (async)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0x2, 0x9, 0x6, 0x0, 0xff, 0x0, 0x17, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x6, @perf_bp={&(0x7f0000000000), 0x857d7c6fcdab1ff3}, 0x40, 0x1, 0x731e, 0x4, 0x8000, 0x7, 0x7f, 0x0, 0x6, 0x0, 0x8001}, r3, 0x3, 0xffffffffffffffff, 0x2) (async)

[ 1655.559628][T28943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1655.611092][T28945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:56 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0xd00000000000000}]}, 0x78)

02:42:56 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x8000000000000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:56 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x38, 0x4}, [{}]}, 0x78)

[ 1655.688142][T28951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:57 executing program 2:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)
syz_80211_inject_frame(&(0x7f00000000c0)=@broadcast, &(0x7f0000000100)=@ctrl_frame=@ack={{}, {0x8}, @device_b}, 0xa)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000080)=@mgmt_frame=@disassoc={@with_ht={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x5ce}, @device_a, @device_a, @initial, {0x0, 0x7}}, @ver_80211n={0x0, 0x2, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}}, 0x22, @val={0x8c, 0x10, {0xdd1, "d7d25ca5ac96", @short="f6fb74c8f86fd177"}}}, 0x30)
syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000180)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, {}, @random="299711c261eb", @device_a, @device_b, {0x4, 0xfc1}}, @random="5a697831fa8017fdaca3c047675b90db507677a7fab38bd0b309337de5b40b748e927a0f36f53ead2946bec229a00258fa7eb7405d994a67cccf9630206b3406868354ee38a4fd02b00a1007bfed422afab10877c33ab078d10970b638aa98df96b80c7d97fc815bab397d9e87bd8a561bd56d352745a2d54c541b340d65c25edda1b11d39e108bbc340ea42471abe87cfb047c73f9c207d4860a3dabdc9e7e8ffa1c41cbbff55de7a2c653f8f17f9856977524379e406f72820c83cc6397df40b13e23611db0d02e23f93a6c0841ac24fe841a9d6081927c6f9bdc1d7a0b3b28a2e2fa25b7569422bcb1d93724dd648e696c652cc330d0112fa5acbb0415fef3e131ec956c769a30b30376dd7b4d656a650cc7913d4c0277104b896e2ba0e6857105a37589ff6954f5b3413e7b41386ddcf5096b4ba37b507dc7fae30e017496816b750462f31749e8040b134963949a1f1a0a3ead8c0426fc18f0ef2fdf6b6836a222c4a3bf931fbdfd321f4c1b9d750c08682def0da73a3dd1ba41d526ee92d3b58da31a70cd2fded9d7b557c2450754307ce6c50ec5fa84877d6a936aa7fdf1506d46c85cb183671ad2845af32b3bceefdea1086b75ebec7257c064005dbed77116fbc3ed399ea9a38cf324ff65f7346d54cb41f9b7c7a622e59833215560122b9feb03895d1fe9855636e6d71bb924e242b16236ed813a27be637dca94e26f101f160f316d33c4916c39e0527c131e6cb1e825ed49e7a6ef64898d912f5e608c6da12f8df82f973f06cb231c00c0bee5361dc5bbdcd6f257a8351478a5ade0ff758b5de52497769c8bc6d5894be198fe957dba13808f53812d575866394b319229b2401d56de53009f66a82d9472cfb121ddfd50bad3a2e5db9d600364769cacfbc781d9d04b9619f45441fab6968e57bb5747c0ed8a2941ebee78983aad3ca31407369529d69b95036c4eb60a530e78dc90e1cfe9d22a627e5d3de8ec86bc86b94e792e162983c65ac39919621b05aac39b45e131fee05ce4534f5add40024630f2ebddb5ebd65a5757341bae50748e9f99bd0b6de32a273132d5656705c566ae02b6c02e80479e10bfe306212c679357bd567eb3ff40486ddfd1cf933d5141ddcfa8f60b6dd0e15b7ccb39c61dd27b29de22b1fa67bb735c70c66e34a3b3a90aed7459ee9988cb9ecd1279070f0a562c38cc3df6543d23478fecd47d3d238583f1f444443382da6e9894bdd09e58093366fe42946729dc6ebb079eb305787326abdd66b5b096e42446de9861417b9618477b0d2a5e0390fcf255c69137f2035c2e5a5f0ac58e345525421d3259c746d1b1934acc25ef9c84333baa2e40f5313d704084df97cf5c81ca78cb5df88f14b4984c1058540b4e082ffa87bc45c0935dee0c031110d8b8123c25846221708f3d05f1a1c83a7343c4eab1ec19afa0d1c557e66e8ec4fdfcbb9c25f09125e5a417b66e2cbc0af29f6e84b030c5089d7e8f2b9a900d5d92dd4b92cf37b6d79ab60d2fc950cdb190b6798e9e2099d83962562d577fc1e3fd11ba3357e2275996066a7d2451db28c1373f0c97a76b662f296c2b7a2961caf5a95d37e268f79ba9d56da9ef3e3bfb22f763ec39c40c412ac5aa52e4f6723ba620a791d7085f61fabe80fc67ba3da8084f2948bf84365230f121663c9f9490ea8f57d28ba1a82a3687810631daee6e56ab8bad9b7b5863ebe0f911ceea192f367f033c60d01cfdf2171f3ad10b68728d9af9e1cddd41eaa58adc36722c6bfe7dff924a2aa12e3a9d7bea95aee99d4a52c4969ad450319ed48496639b2b7863cf86a003a0cc3f28287d62b727c030a9276c59e97512774dac9ee290d484564fc14d62f79e225bdaa36119c50ccc9efdba77309afdac87c92ddba8f90d7f4c940bf81dbdaa4c710e56d90c1328b552fc0b3e448f98bee7fcc04409114d42d222b6e1f71212c8d3c2f976d6c29a3e18b21353892ef7859648ed779516affaac1cdc7e642f15ffd1eebc4493cd14ef5e2dbef2a16e000bbc031af5abf5465653b673a71c3bb1c68340a85d39ed9432f3d1b4321f34b708decbbfba89755a860e6148b544206b7c19a07d2f57f764635142fba53a1acb13d5957128c2fca186cbff56b1d1d87a3f2ebd80bdc257339c8a7f8f7af1f800bbe9104df99a34f4b9bf1b7eb7f9e8a806a9f8d5a64629be6751680043b9ebbddf0d346965fdb33bf7680005a926c2a4c31b065261373eb13cd8518dd97d5d8f4a781c6e015f15d82ded77a5dcb35"}, 0x664)

02:42:57 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/417], 0x78)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x4, 0x0, 0xff, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xd0f0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}, 0x2, 0x5f, 0x7, 0xc4f122b58a9eab8c, 0x100000000, 0x2, 0x200, 0x0, 0x5, 0x0, 0xc700000000000000}, 0xffffffffffffffff, 0x8, r1, 0x2)
syz_open_dev$tty1(0xc, 0x4, 0x4)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040))
r3 = getpid()
r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff)
r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x4, 0x6, 0x5, 0x0, 0x100000000, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80, 0x0, @perf_config_ext={0x2}, 0x2, 0x281, 0xfffffffb, 0x9, 0x86, 0x9, 0x4, 0x0, 0x1, 0x0, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0x1)
r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x420002, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, r7)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x40010, r5, 0xf36c9000)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0x2, 0x9, 0x6, 0x0, 0xff, 0x0, 0x17, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x6, @perf_bp={&(0x7f0000000000), 0x857d7c6fcdab1ff3}, 0x40, 0x1, 0x731e, 0x4, 0x8000, 0x7, 0x7f, 0x0, 0x6, 0x0, 0x8001}, r3, 0x3, 0xffffffffffffffff, 0x2)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/417], 0x78) (async)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x4, 0x0, 0xff, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xd0f0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}, 0x2, 0x5f, 0x7, 0xc4f122b58a9eab8c, 0x100000000, 0x2, 0x200, 0x0, 0x5, 0x0, 0xc700000000000000}, 0xffffffffffffffff, 0x8, r1, 0x2) (async)
syz_open_dev$tty1(0xc, 0x4, 0x4) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) (async)
getpid() (async)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async)
fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x4, 0x6, 0x5, 0x0, 0x100000000, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80, 0x0, @perf_config_ext={0x2}, 0x2, 0x281, 0xfffffffb, 0x9, 0x86, 0x9, 0x4, 0x0, 0x1, 0x0, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0x1) (async)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x420002, 0x0) (async)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, r7) (async)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x40010, r5, 0xf36c9000) (async)
sched_setscheduler(r3, 0x5, &(0x7f0000000380)) (async)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0x2, 0x9, 0x6, 0x0, 0xff, 0x0, 0x17, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x6, @perf_bp={&(0x7f0000000000), 0x857d7c6fcdab1ff3}, 0x40, 0x1, 0x731e, 0x4, 0x8000, 0x7, 0x7f, 0x0, 0x6, 0x0, 0x8001}, r3, 0x3, 0xffffffffffffffff, 0x2) (async)

02:42:57 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0xe00000000000000}]}, 0x78)

02:42:57 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x3, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:57 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x21000000)

02:42:57 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x8201000000000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:57 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:57 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0xf00000000000000}]}, 0x78)

02:42:57 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x401}}, './file0\x00'})
sendfile(r1, r0, &(0x7f00000000c0)=0x3, 0x100000001)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)

[ 1656.155448][T28974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:57 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x6, 0x0, 0x38, 0x4}, [{}]}, 0x78)

[ 1656.206485][T28974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:57 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x8800000000000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:57 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x1800000000000000}]}, 0x78)

[ 1656.264626][T28974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1656.310577][T28982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:57 executing program 2:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)
syz_80211_inject_frame(&(0x7f00000000c0)=@broadcast, &(0x7f0000000100)=@ctrl_frame=@ack={{}, {0x8}, @device_b}, 0xa) (async)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000080)=@mgmt_frame=@disassoc={@with_ht={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x5ce}, @device_a, @device_a, @initial, {0x0, 0x7}}, @ver_80211n={0x0, 0x2, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}}, 0x22, @val={0x8c, 0x10, {0xdd1, "d7d25ca5ac96", @short="f6fb74c8f86fd177"}}}, 0x30) (async)
syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000180)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, {}, @random="299711c261eb", @device_a, @device_b, {0x4, 0xfc1}}, @random="5a697831fa8017fdaca3c047675b90db507677a7fab38bd0b309337de5b40b748e927a0f36f53ead2946bec229a00258fa7eb7405d994a67cccf9630206b3406868354ee38a4fd02b00a1007bfed422afab10877c33ab078d10970b638aa98df96b80c7d97fc815bab397d9e87bd8a561bd56d352745a2d54c541b340d65c25edda1b11d39e108bbc340ea42471abe87cfb047c73f9c207d4860a3dabdc9e7e8ffa1c41cbbff55de7a2c653f8f17f9856977524379e406f72820c83cc6397df40b13e23611db0d02e23f93a6c0841ac24fe841a9d6081927c6f9bdc1d7a0b3b28a2e2fa25b7569422bcb1d93724dd648e696c652cc330d0112fa5acbb0415fef3e131ec956c769a30b30376dd7b4d656a650cc7913d4c0277104b896e2ba0e6857105a37589ff6954f5b3413e7b41386ddcf5096b4ba37b507dc7fae30e017496816b750462f31749e8040b134963949a1f1a0a3ead8c0426fc18f0ef2fdf6b6836a222c4a3bf931fbdfd321f4c1b9d750c08682def0da73a3dd1ba41d526ee92d3b58da31a70cd2fded9d7b557c2450754307ce6c50ec5fa84877d6a936aa7fdf1506d46c85cb183671ad2845af32b3bceefdea1086b75ebec7257c064005dbed77116fbc3ed399ea9a38cf324ff65f7346d54cb41f9b7c7a622e59833215560122b9feb03895d1fe9855636e6d71bb924e242b16236ed813a27be637dca94e26f101f160f316d33c4916c39e0527c131e6cb1e825ed49e7a6ef64898d912f5e608c6da12f8df82f973f06cb231c00c0bee5361dc5bbdcd6f257a8351478a5ade0ff758b5de52497769c8bc6d5894be198fe957dba13808f53812d575866394b319229b2401d56de53009f66a82d9472cfb121ddfd50bad3a2e5db9d600364769cacfbc781d9d04b9619f45441fab6968e57bb5747c0ed8a2941ebee78983aad3ca31407369529d69b95036c4eb60a530e78dc90e1cfe9d22a627e5d3de8ec86bc86b94e792e162983c65ac39919621b05aac39b45e131fee05ce4534f5add40024630f2ebddb5ebd65a5757341bae50748e9f99bd0b6de32a273132d5656705c566ae02b6c02e80479e10bfe306212c679357bd567eb3ff40486ddfd1cf933d5141ddcfa8f60b6dd0e15b7ccb39c61dd27b29de22b1fa67bb735c70c66e34a3b3a90aed7459ee9988cb9ecd1279070f0a562c38cc3df6543d23478fecd47d3d238583f1f444443382da6e9894bdd09e58093366fe42946729dc6ebb079eb305787326abdd66b5b096e42446de9861417b9618477b0d2a5e0390fcf255c69137f2035c2e5a5f0ac58e345525421d3259c746d1b1934acc25ef9c84333baa2e40f5313d704084df97cf5c81ca78cb5df88f14b4984c1058540b4e082ffa87bc45c0935dee0c031110d8b8123c25846221708f3d05f1a1c83a7343c4eab1ec19afa0d1c557e66e8ec4fdfcbb9c25f09125e5a417b66e2cbc0af29f6e84b030c5089d7e8f2b9a900d5d92dd4b92cf37b6d79ab60d2fc950cdb190b6798e9e2099d83962562d577fc1e3fd11ba3357e2275996066a7d2451db28c1373f0c97a76b662f296c2b7a2961caf5a95d37e268f79ba9d56da9ef3e3bfb22f763ec39c40c412ac5aa52e4f6723ba620a791d7085f61fabe80fc67ba3da8084f2948bf84365230f121663c9f9490ea8f57d28ba1a82a3687810631daee6e56ab8bad9b7b5863ebe0f911ceea192f367f033c60d01cfdf2171f3ad10b68728d9af9e1cddd41eaa58adc36722c6bfe7dff924a2aa12e3a9d7bea95aee99d4a52c4969ad450319ed48496639b2b7863cf86a003a0cc3f28287d62b727c030a9276c59e97512774dac9ee290d484564fc14d62f79e225bdaa36119c50ccc9efdba77309afdac87c92ddba8f90d7f4c940bf81dbdaa4c710e56d90c1328b552fc0b3e448f98bee7fcc04409114d42d222b6e1f71212c8d3c2f976d6c29a3e18b21353892ef7859648ed779516affaac1cdc7e642f15ffd1eebc4493cd14ef5e2dbef2a16e000bbc031af5abf5465653b673a71c3bb1c68340a85d39ed9432f3d1b4321f34b708decbbfba89755a860e6148b544206b7c19a07d2f57f764635142fba53a1acb13d5957128c2fca186cbff56b1d1d87a3f2ebd80bdc257339c8a7f8f7af1f800bbe9104df99a34f4b9bf1b7eb7f9e8a806a9f8d5a64629be6751680043b9ebbddf0d346965fdb33bf7680005a926c2a4c31b065261373eb13cd8518dd97d5d8f4a781c6e015f15d82ded77a5dcb35"}, 0x664)

02:42:57 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x401}}, './file0\x00'})
sendfile(r1, r0, &(0x7f00000000c0)=0x3, 0x100000001)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)

02:42:57 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:57 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x1a00000000000000}]}, 0x78)

02:42:57 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x22000000)

02:42:57 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x9203000000000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:57 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x8, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:57 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x1b00000000000000}]}, 0x78)

02:42:57 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x401}}, './file0\x00'})
sendfile(r1, r0, &(0x7f00000000c0)=0x3, 0x100000001) (async)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)

02:42:57 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x9, 0x0, 0x38, 0x4}, [{}]}, 0x78)

[ 1656.754419][T29006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1656.790623][T29006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:57 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x9601000000000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:58 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x3e00000000000000}]}, 0x78)

[ 1656.877319][T29008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:58 executing program 2:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)
syz_80211_inject_frame(&(0x7f00000000c0)=@broadcast, &(0x7f0000000100)=@ctrl_frame=@ack={{}, {0x8}, @device_b}, 0xa)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000080)=@mgmt_frame=@disassoc={@with_ht={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x5ce}, @device_a, @device_a, @initial, {0x0, 0x7}}, @ver_80211n={0x0, 0x2, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}}, 0x22, @val={0x8c, 0x10, {0xdd1, "d7d25ca5ac96", @short="f6fb74c8f86fd177"}}}, 0x30)
syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000180)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, {}, @random="299711c261eb", @device_a, @device_b, {0x4, 0xfc1}}, @random="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"}, 0x664)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34) (async)
syz_80211_inject_frame(&(0x7f00000000c0)=@broadcast, &(0x7f0000000100)=@ctrl_frame=@ack={{}, {0x8}, @device_b}, 0xa) (async)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000080)=@mgmt_frame=@disassoc={@with_ht={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x5ce}, @device_a, @device_a, @initial, {0x0, 0x7}}, @ver_80211n={0x0, 0x2, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}}, 0x22, @val={0x8c, 0x10, {0xdd1, "d7d25ca5ac96", @short="f6fb74c8f86fd177"}}}, 0x30) (async)
syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000180)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, {}, @random="299711c261eb", @device_a, @device_b, {0x4, 0xfc1}}, @random="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"}, 0x664) (async)

02:42:58 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xa, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:58 executing program 1:
syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00')
open(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1, 0x1b2)
mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f00000002c0)='./file0/file0\x00', 0x0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
renameat2(r1, &(0x7f0000001680)='./file0/file0\x00', r0, &(0x7f00000016c0)='./file0\x00', 0x0)
close(r0)

02:42:58 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x23000000)

02:42:58 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x7f00000000000000}]}, 0x78)

02:42:58 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0xcb03000000000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:58 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x9b00000000000000}]}, 0x78)

02:42:58 executing program 1:
syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00')
open(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1, 0x1b2)
mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f00000002c0)='./file0/file0\x00', 0x0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
renameat2(r1, &(0x7f0000001680)='./file0/file0\x00', r0, &(0x7f00000016c0)='./file0\x00', 0x0)
close(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') (async)
open(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1, 0x1b2) (async)
mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async)
renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f00000002c0)='./file0/file0\x00', 0x0) (async)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') (async)
renameat2(r1, &(0x7f0000001680)='./file0/file0\x00', r0, &(0x7f00000016c0)='./file0\x00', 0x0) (async)
close(r0) (async)

[ 1657.327665][T29134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1657.347866][T29134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:58 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xb, 0x0, 0x38, 0x4}, [{}]}, 0x78)

[ 1657.377221][T29134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1657.413707][T29134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:58 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0xd203000000000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:58 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}, 0x78)

02:42:58 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xc, 0x0, 0x38, 0x4}, [{}]}, 0x78)

[ 1657.484752][T29144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:58 executing program 2:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000080)=@ctrl_frame=@ack={{}, {0xd3}, @broadcast}, 0xa)

02:42:58 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x24000000)

02:42:58 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}, 0x78)

02:42:58 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xd, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:58 executing program 1:
syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00')
open(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1, 0x1b2)
mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f00000002c0)='./file0/file0\x00', 0x0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
renameat2(r1, &(0x7f0000001680)='./file0/file0\x00', r0, &(0x7f00000016c0)='./file0\x00', 0x0)
close(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') (async)
open(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1, 0x1b2) (async)
mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async)
renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f00000002c0)='./file0/file0\x00', 0x0) (async)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') (async)
renameat2(r1, &(0x7f0000001680)='./file0/file0\x00', r0, &(0x7f00000016c0)='./file0\x00', 0x0) (async)
close(r0) (async)

02:42:58 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0xdd01000000000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:59 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xe, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:59 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x7}]}, 0x78)

[ 1657.961861][T29283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:59 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0xea03000000000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

[ 1658.012189][T29329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:59 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b5b07070000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000ff07000000000000000000000000000000000000000000000000000000001000"/120], 0x78)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
r2 = getpid()
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x6, 0x80, 0x5, 0x4, 0x0, 0x534, 0x800, 0xc, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x101, 0x2}, 0x410, 0x10000, 0x81, 0x3, 0x3, 0x2, 0xd7, 0x0, 0x5, 0x0, 0x1}, r2, 0x4, r1, 0x8)
mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f00000002c0)='./file0/file0\x00', 0x0)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00')
renameat2(r3, &(0x7f0000001680)='./file0/file0\x00', r1, &(0x7f00000016c0)='./file0\x00', 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200088e5, 0x0, 0x0)
sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x3fa, 0x8, 0x70bd2b, 0x25dfdbfc, {0x1, 0x1, 0x1}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008001}, 0x20040810)

02:42:59 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xf, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:59 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, 0x78)

02:42:59 executing program 2:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34) (async, rerun: 32)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000080)=@ctrl_frame=@ack={{}, {0xd3}, @broadcast}, 0xa) (rerun: 32)

02:42:59 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x18, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:59 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x25000000)

02:42:59 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b5b07070000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000ff07000000000000000000000000000000000000000000000000000000001000"/120], 0x78)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
r2 = getpid()
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x6, 0x80, 0x5, 0x4, 0x0, 0x534, 0x800, 0xc, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x101, 0x2}, 0x410, 0x10000, 0x81, 0x3, 0x3, 0x2, 0xd7, 0x0, 0x5, 0x0, 0x1}, r2, 0x4, r1, 0x8)
mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f00000002c0)='./file0/file0\x00', 0x0)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00')
renameat2(r3, &(0x7f0000001680)='./file0/file0\x00', r1, &(0x7f00000016c0)='./file0\x00', 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200088e5, 0x0, 0x0)
sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x3fa, 0x8, 0x70bd2b, 0x25dfdbfc, {0x1, 0x1, 0x1}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008001}, 0x20040810)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b5b07070000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000ff07000000000000000000000000000000000000000000000000000000001000"/120], 0x78) (async)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') (async)
getpid() (async)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x6, 0x80, 0x5, 0x4, 0x0, 0x534, 0x800, 0xc, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x101, 0x2}, 0x410, 0x10000, 0x81, 0x3, 0x3, 0x2, 0xd7, 0x0, 0x5, 0x0, 0x1}, r2, 0x4, r1, 0x8) (async)
mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f00000002c0)='./file0/file0\x00', 0x0) (async)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00') (async)
renameat2(r3, &(0x7f0000001680)='./file0/file0\x00', r1, &(0x7f00000016c0)='./file0\x00', 0x0) (async)
sendto$inet(r3, 0x0, 0x0, 0x200088e5, 0x0, 0x0) (async)
sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x3fa, 0x8, 0x70bd2b, 0x25dfdbfc, {0x1, 0x1, 0x1}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008001}, 0x20040810) (async)

02:42:59 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x9}]}, 0x78)

02:42:59 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0xec01000000000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:42:59 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xa}]}, 0x78)

02:42:59 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x1a, 0x0, 0x38, 0x4}, [{}]}, 0x78)

[ 1658.487788][T29407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1658.521457][T29409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:59 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xc}]}, 0x78)

02:42:59 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x1b, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:42:59 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0xffffffff00000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

[ 1658.595821][T29407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:42:59 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b5b07070000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000ff07000000000000000000000000000000000000000000000000000000001000"/120], 0x78)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
r2 = getpid()
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x6, 0x80, 0x5, 0x4, 0x0, 0x534, 0x800, 0xc, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x101, 0x2}, 0x410, 0x10000, 0x81, 0x3, 0x3, 0x2, 0xd7, 0x0, 0x5, 0x0, 0x1}, r2, 0x4, r1, 0x8)
mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f00000002c0)='./file0/file0\x00', 0x0)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00')
renameat2(r3, &(0x7f0000001680)='./file0/file0\x00', r1, &(0x7f00000016c0)='./file0\x00', 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200088e5, 0x0, 0x0)
sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x3fa, 0x8, 0x70bd2b, 0x25dfdbfc, {0x1, 0x1, 0x1}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008001}, 0x20040810)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b5b07070000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000ff07000000000000000000000000000000000000000000000000000000001000"/120], 0x78) (async)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') (async)
getpid() (async)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x6, 0x80, 0x5, 0x4, 0x0, 0x534, 0x800, 0xc, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x101, 0x2}, 0x410, 0x10000, 0x81, 0x3, 0x3, 0x2, 0xd7, 0x0, 0x5, 0x0, 0x1}, r2, 0x4, r1, 0x8) (async)
mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f00000002c0)='./file0/file0\x00', 0x0) (async)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00') (async)
renameat2(r3, &(0x7f0000001680)='./file0/file0\x00', r1, &(0x7f00000016c0)='./file0\x00', 0x0) (async)
sendto$inet(r3, 0x0, 0x0, 0x200088e5, 0x0, 0x0) (async)
sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x3fa, 0x8, 0x70bd2b, 0x25dfdbfc, {0x1, 0x1, 0x1}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008001}, 0x20040810) (async)

[ 1658.649862][T29409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1658.691039][T29407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1658.760128][T29409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1658.791980][T29407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1658.813470][T29409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1658.827883][T29407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1658.853476][T29407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1658.896380][T29407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1658.920185][T29407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1658.952430][T29407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1658.984769][T29407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1659.000531][T29407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1659.021073][T29407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1659.039329][T29407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1659.054777][T29407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1659.070304][T29407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1659.082893][T29407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1659.094545][T29407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1659.107966][T29407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1659.120625][T29407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1659.133058][T29407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1659.144724][T29407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1659.156598][T29407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1659.168020][T29407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1659.179696][T29407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1659.191497][T29407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1659.210762][T29407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1659.223568][T29407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1659.235408][T29407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1659.247458][T29407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1659.259278][T29407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1659.270793][T29407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1659.282888][T29407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:00 executing program 2:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000080)=@ctrl_frame=@ack={{}, {0xd3}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34) (async)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000080)=@ctrl_frame=@ack={{}, {0xd3}, @broadcast}, 0xa) (async)

02:43:00 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x26000000)

02:43:00 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x3e, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:00 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xd}]}, 0x78)

02:43:00 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0xffffffffffffffff}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:00 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x1}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0xfffffffffffffffb}]}, 0x78)

02:43:00 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xe}]}, 0x78)

02:43:00 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x1}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0xfffffffffffffffb}]}, 0x78)

02:43:00 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x4b, 0x0, 0x38, 0x4}, [{}]}, 0x78)

[ 1659.679407][T29623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1659.742553][T29623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:00 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

[ 1659.791389][T29623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:00 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x78, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:00 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xf}]}, 0x78)

02:43:01 executing program 2:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=@ctrl_frame=@cf_end={{}, {0x5}}, 0x10)

02:43:01 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x1}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0xfffffffffffffffb}]}, 0x78)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x1}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0xfffffffffffffffb}]}, 0x78) (async)

02:43:01 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}]}, 0x78)

02:43:01 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x9b, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:01 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x27000000)

02:43:01 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38, 'devgroup\x00', 0x2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:01 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}]}, 0x78)

[ 1660.244893][T29659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1660.259409][T29659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:01 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xf0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:01 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}]}, 0x78)

02:43:01 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38, 'devgroup\x00', 0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:01 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b5b07070000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000433c60bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000"], 0x78)
syz_open_dev$tty1(0xc, 0x4, 0x4)

02:43:01 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x3e}]}, 0x78)

02:43:01 executing program 2:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=@ctrl_frame=@cf_end={{}, {0x5}}, 0x10)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34) (async)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=@ctrl_frame=@cf_end={{}, {0x5}}, 0x10) (async)

02:43:01 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x180, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:01 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}]}, 0x78)

02:43:01 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x28000000)

02:43:01 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b5b07070000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000433c60bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000"], 0x78) (async)
syz_open_dev$tty1(0xc, 0x4, 0x4)

02:43:01 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38, 'devgroup\x00', 0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

[ 1660.645243][T29780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:01 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x300, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:01 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}]}, 0x78)

[ 1660.695801][T29839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1660.752912][T29780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:01 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b5b07070000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000433c60bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000"], 0x78) (async)
syz_open_dev$tty1(0xc, 0x4, 0x4)

02:43:01 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x180}]}, 0x78)

02:43:01 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x500, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:01 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38, 'devgroup\x00', 0x5}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

[ 1660.800233][T29880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:02 executing program 2:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=@ctrl_frame=@cf_end={{}, {0x5}}, 0x10)

02:43:02 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x600, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:02 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x29000000)

02:43:02 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x300}]}, 0x78)

02:43:02 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38, 'devgroup\x00', 0x6}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:02 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"/396], 0x78)

02:43:02 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x700, 0x0, 0x38, 0x4}, [{}]}, 0x78)

[ 1661.211339][T30008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:02 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x700}]}, 0x78)

02:43:02 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"/396], 0x78)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"/396], 0x78) (async)

[ 1661.256816][T30008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:02 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x900, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:02 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x900}]}, 0x78)

02:43:02 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38, 'devgroup\x00', 0x7}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:02 executing program 2:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000100)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="12168aca17de477cd346617823cedd69ef773933701132a85c053f2153ab6df3ed43e8ffa915cb0815fbea213fee6d82d750ee74d7d99a8e61fa7ceffdc1fd32805c70a658554007a95e9dec80503d78687d703801abbcacd0f5b8890cece9469f59aff9ae4afe6b", @ANYBLOB="fafc81b511261fb3ce6c34b4f6925f950276552097572d047217f14fdb2a3b3e32d2ca27a1", @ANYRESHEX=0x0], 0x34)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=@ctrl_frame=@rts={{}, {0x7ffe}, @broadcast, @device_b}, 0x10)

02:43:02 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xa00, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:02 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}]}, 0x78)

02:43:02 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x37000000)

02:43:02 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"/396], 0x78)

02:43:02 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38, 'devgroup\x00', 0x8}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:02 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xb00, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:02 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}]}, 0x78)

[ 1661.697175][T30140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1661.722061][T30163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:02 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xc00, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:02 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}]}, 0x78)

02:43:02 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f00000002c0)='./file0/file0\x00', 0x0)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00')
renameat2(r2, &(0x7f0000001680)='./file0/file0\x00', r1, &(0x7f00000016c0)='./file0\x00', 0x0)
r3 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x4, 0x6, 0x5, 0x0, 0x100000000, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80, 0x0, @perf_config_ext={0x2}, 0x2, 0x281, 0xfffffffb, 0x9, 0x86, 0x9, 0x4, 0x0, 0x1, 0x0, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0x1)
sendfile(r1, r4, &(0x7f0000000000)=0x40, 0xffffffffffffffff)

02:43:03 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38, 'devgroup\x00', 0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:03 executing program 2:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000100)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="12168aca17de477cd346617823cedd69ef773933701132a85c053f2153ab6df3ed43e8ffa915cb0815fbea213fee6d82d750ee74d7d99a8e61fa7ceffdc1fd32805c70a658554007a95e9dec80503d78687d703801abbcacd0f5b8890cece9469f59aff9ae4afe6b", @ANYBLOB="fafc81b511261fb3ce6c34b4f6925f950276552097572d047217f14fdb2a3b3e32d2ca27a1", @ANYRESHEX=0x0], 0x34) (async, rerun: 32)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=@ctrl_frame=@rts={{}, {0x7ffe}, @broadcast, @device_b}, 0x10) (rerun: 32)

02:43:03 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xd00, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:03 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}]}, 0x78)

02:43:03 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x3f000000)

02:43:03 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) (rerun: 64)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') (async)
mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f00000002c0)='./file0/file0\x00', 0x0) (async)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00')
renameat2(r2, &(0x7f0000001680)='./file0/file0\x00', r1, &(0x7f00000016c0)='./file0\x00', 0x0) (async, rerun: 32)
r3 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (rerun: 32)
r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x4, 0x6, 0x5, 0x0, 0x100000000, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80, 0x0, @perf_config_ext={0x2}, 0x2, 0x281, 0xfffffffb, 0x9, 0x86, 0x9, 0x4, 0x0, 0x1, 0x0, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0x1) (async)
sendfile(r1, r4, &(0x7f0000000000)=0x40, 0xffffffffffffffff)

02:43:03 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38, 'devgroup\x00', 0x11}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:03 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xe00, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:03 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}]}, 0x78)

[ 1662.214827][T30276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1662.245899][T30275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1662.269037][T30276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:03 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xf00, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:03 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38, 'devgroup\x00', 0x1d}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

[ 1662.323186][T30276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1662.337420][T30276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:03 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f00000002c0)='./file0/file0\x00', 0x0)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00')
renameat2(r2, &(0x7f0000001680)='./file0/file0\x00', r1, &(0x7f00000016c0)='./file0\x00', 0x0)
r3 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x4, 0x6, 0x5, 0x0, 0x100000000, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80, 0x0, @perf_config_ext={0x2}, 0x2, 0x281, 0xfffffffb, 0x9, 0x86, 0x9, 0x4, 0x0, 0x1, 0x0, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0x1)
sendfile(r1, r4, &(0x7f0000000000)=0x40, 0xffffffffffffffff)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) (async)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') (async)
mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f00000002c0)='./file0/file0\x00', 0x0) (async)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') (async)
renameat2(r2, &(0x7f0000001680)='./file0/file0\x00', r1, &(0x7f00000016c0)='./file0\x00', 0x0) (async)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async)
fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x4, 0x6, 0x5, 0x0, 0x100000000, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80, 0x0, @perf_config_ext={0x2}, 0x2, 0x281, 0xfffffffb, 0x9, 0x86, 0x9, 0x4, 0x0, 0x1, 0x0, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0x1) (async)
sendfile(r1, r4, &(0x7f0000000000)=0x40, 0xffffffffffffffff) (async)

[ 1662.339021][T30276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1662.340491][T30276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1662.342399][T30276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1662.343879][T30276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1662.380771][T30276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1662.385331][T30275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1662.389934][T30276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1662.412083][T30275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1662.421282][T30275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1662.429649][T30275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1662.437585][T30275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:03 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x48000000)

[ 1662.457392][T30276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1662.620855][T30276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1662.667300][T30276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1662.706789][T30276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1662.737459][T30276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1662.759385][T30276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1662.770974][T30276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1662.782263][T30276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1662.793992][T30276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1662.795370][T30276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1662.818638][T30276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1662.837526][T30276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1662.850569][T30276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1662.871668][T30276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1662.884016][T30276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1662.895699][T30276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1662.908146][T30276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:04 executing program 2:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000100)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="12168aca17de477cd346617823cedd69ef773933701132a85c053f2153ab6df3ed43e8ffa915cb0815fbea213fee6d82d750ee74d7d99a8e61fa7ceffdc1fd32805c70a658554007a95e9dec80503d78687d703801abbcacd0f5b8890cece9469f59aff9ae4afe6b", @ANYBLOB="fafc81b511261fb3ce6c34b4f6925f950276552097572d047217f14fdb2a3b3e32d2ca27a1", @ANYRESHEX=0x0], 0x34)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=@ctrl_frame=@rts={{}, {0x7ffe}, @broadcast, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000100)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="12168aca17de477cd346617823cedd69ef773933701132a85c053f2153ab6df3ed43e8ffa915cb0815fbea213fee6d82d750ee74d7d99a8e61fa7ceffdc1fd32805c70a658554007a95e9dec80503d78687d703801abbcacd0f5b8890cece9469f59aff9ae4afe6b", @ANYBLOB="fafc81b511261fb3ce6c34b4f6925f950276552097572d047217f14fdb2a3b3e32d2ca27a1", @ANYRESHEX=0x0], 0x34) (async)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=@ctrl_frame=@rts={{}, {0x7ffe}, @broadcast, @device_b}, 0x10) (async)

02:43:04 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}]}, 0x78)

02:43:04 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x1800, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:04 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38, 'devgroup\x00', 0x45}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:04 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x4, 0x6, 0x5, 0x0, 0x100000000, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80, 0x0, @perf_config_ext={0x2}, 0x2, 0x281, 0xfffffffb, 0x9, 0x86, 0x9, 0x4, 0x0, 0x1, 0x0, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0x1)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x0, 0x4}, [{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, 0x78)

02:43:04 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x4c000000)

02:43:04 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1a00}]}, 0x78)

02:43:04 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x1a00, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:04 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x4, 0x6, 0x5, 0x0, 0x100000000, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80, 0x0, @perf_config_ext={0x2}, 0x2, 0x281, 0xfffffffb, 0x9, 0x86, 0x9, 0x4, 0x0, 0x1, 0x0, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0x1)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x0, 0x4}, [{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, 0x78)

[ 1663.304607][T30496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:04 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1b00}]}, 0x78)

[ 1663.356113][T30496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1663.390673][T30496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:04 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38, 'devgroup\x00', 0x88}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:04 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x4, 0x6, 0x5, 0x0, 0x100000000, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80, 0x0, @perf_config_ext={0x2}, 0x2, 0x281, 0xfffffffb, 0x9, 0x86, 0x9, 0x4, 0x0, 0x1, 0x0, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0x1)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x20, 0x0, 0x38, 0x0, 0x4}, [{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, 0x78)

[ 1663.436293][T30502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:04 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x3e00}]}, 0x78)

02:43:04 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x1b00, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:04 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x60000000)

02:43:04 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38, 'devgroup\x00', 0xff}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:04 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f00000002c0)='./file0/file0\x00', 0x0)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000002c0)='./file0/file0\x00', 0x0)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00')
renameat2(r3, &(0x7f0000001680)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f00000016c0)='./file0\x00', 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000540), 0x6e, &(0x7f0000000880)=[{&(0x7f00000005c0)=""/234, 0xea}, {&(0x7f0000000280)=""/38, 0x26}, {&(0x7f00000006c0)=""/132, 0x84}, {&(0x7f0000000380)=""/64, 0x40}, {&(0x7f0000000780)=""/235, 0xeb}], 0x5, &(0x7f0000000900)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c46f1d3415ae9060000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x108}, 0x1)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00')
renameat2(r2, &(0x7f0000001680)='./file0/file0\x00', r1, &(0x7f00000016c0)='./file0\x00', 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200088e5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x18445, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, r2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b5b07070000000060000000fffffffffffffff400000000000000000080000040000000001700000000000000000000000000000000330000000000000000000000000000000001000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000c382dbd44e169b9ac4138c9a1dcef129425a93fec2a7ff01cc82a9d1df0f80d8b1b6e86e4b4988c1f6ae8aa187e8815be63ab2d668d589653d9a5edbd60839041863aa2d75b1b0193d3635d4abeee3753795bec90fee5c057d8e7effec973bbb47e8d88a751bad35c379"], 0x78)
r4 = accept4$phonet_pipe(r1, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0x80000)
getpeername(r4, &(0x7f0000000300)=@alg, &(0x7f0000000180)=0x80)

02:43:04 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8)
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0})
keyctl$chown(0x4, 0x0, r2, r3)
keyctl$get_persistent(0x16, r2, 0x0)
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0})
keyctl$chown(0x4, 0x0, r4, r5)
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x3}, [{0x2, 0x0, r1}, {0x2, 0x5, r2}, {0x2, 0x1}, {0x2, 0x2}], {0x4, 0x4}, [{0x8, 0x1, 0xee01}, {0x8, 0x5, r5}, {0x8, 0x2, 0xffffffffffffffff}], {0x10, 0x6}, {0x20, 0x4}}, 0x5c, 0x1)
r6 = getpid()
sched_setscheduler(r6, 0x5, &(0x7f0000000380))
r7 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
fcntl$dupfd(r7, 0x0, 0xffffffffffffffff)
kcmp(0xffffffffffffffff, r6, 0x0, r7, 0xffffffffffffffff)
ptrace(0x8, r6)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)

02:43:04 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}]}, 0x78)

02:43:04 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x3e00, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:05 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') (async)
mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f00000002c0)='./file0/file0\x00', 0x0)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffffff, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000002c0)='./file0/file0\x00', 0x0) (async)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00') (async)
renameat2(r3, &(0x7f0000001680)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f00000016c0)='./file0\x00', 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000540), 0x6e, &(0x7f0000000880)=[{&(0x7f00000005c0)=""/234, 0xea}, {&(0x7f0000000280)=""/38, 0x26}, {&(0x7f00000006c0)=""/132, 0x84}, {&(0x7f0000000380)=""/64, 0x40}, {&(0x7f0000000780)=""/235, 0xeb}], 0x5, &(0x7f0000000900)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c46f1d3415ae9060000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x108}, 0x1) (async)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') (async)
renameat2(r2, &(0x7f0000001680)='./file0/file0\x00', r1, &(0x7f00000016c0)='./file0\x00', 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200088e5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x18445, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, r2, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b5b07070000000060000000fffffffffffffff400000000000000000080000040000000001700000000000000000000000000000000330000000000000000000000000000000001000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000c382dbd44e169b9ac4138c9a1dcef129425a93fec2a7ff01cc82a9d1df0f80d8b1b6e86e4b4988c1f6ae8aa187e8815be63ab2d668d589653d9a5edbd60839041863aa2d75b1b0193d3635d4abeee3753795bec90fee5c057d8e7effec973bbb47e8d88a751bad35c379"], 0x78) (async)
r4 = accept4$phonet_pipe(r1, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0x80000)
getpeername(r4, &(0x7f0000000300)=@alg, &(0x7f0000000180)=0x80)

[ 1663.907770][T30626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:05 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:05 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00}]}, 0x78)

02:43:05 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x4b00, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:05 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7800, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:05 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x9b00}]}, 0x78)

02:43:05 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x68000000)

02:43:05 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f00000002c0)='./file0/file0\x00', 0x0)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async)
renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000002c0)='./file0/file0\x00', 0x0)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00') (async)
renameat2(r3, &(0x7f0000001680)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f00000016c0)='./file0\x00', 0x0) (async)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000540), 0x6e, &(0x7f0000000880)=[{&(0x7f00000005c0)=""/234, 0xea}, {&(0x7f0000000280)=""/38, 0x26}, {&(0x7f00000006c0)=""/132, 0x84}, {&(0x7f0000000380)=""/64, 0x40}, {&(0x7f0000000780)=""/235, 0xeb}], 0x5, &(0x7f0000000900)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c46f1d3415ae9060000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x108}, 0x1) (async)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') (async, rerun: 32)
renameat2(r2, &(0x7f0000001680)='./file0/file0\x00', r1, &(0x7f00000016c0)='./file0\x00', 0x0) (async, rerun: 32)
sendto$inet(r2, 0x0, 0x0, 0x200088e5, 0x0, 0x0) (async)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x18445, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, r2, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b5b07070000000060000000fffffffffffffff400000000000000000080000040000000001700000000000000000000000000000000330000000000000000000000000000000001000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000c382dbd44e169b9ac4138c9a1dcef129425a93fec2a7ff01cc82a9d1df0f80d8b1b6e86e4b4988c1f6ae8aa187e8815be63ab2d668d589653d9a5edbd60839041863aa2d75b1b0193d3635d4abeee3753795bec90fee5c057d8e7effec973bbb47e8d88a751bad35c379"], 0x78) (rerun: 64)
r4 = accept4$phonet_pipe(r1, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0x80000)
getpeername(r4, &(0x7f0000000300)=@alg, &(0x7f0000000180)=0x80)

02:43:05 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:05 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) (async)
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0})
keyctl$chown(0x4, 0x0, r2, r3) (async)
keyctl$get_persistent(0x16, r2, 0x0)
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0})
keyctl$chown(0x4, 0x0, r4, r5)
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x3}, [{0x2, 0x0, r1}, {0x2, 0x5, r2}, {0x2, 0x1}, {0x2, 0x2}], {0x4, 0x4}, [{0x8, 0x1, 0xee01}, {0x8, 0x5, r5}, {0x8, 0x2, 0xffffffffffffffff}], {0x10, 0x6}, {0x20, 0x4}}, 0x5c, 0x1) (async)
r6 = getpid()
sched_setscheduler(r6, 0x5, &(0x7f0000000380)) (async)
r7 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
fcntl$dupfd(r7, 0x0, 0xffffffffffffffff) (async)
kcmp(0xffffffffffffffff, r6, 0x0, r7, 0xffffffffffffffff)
ptrace(0x8, r6)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)

02:43:05 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7f00, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:05 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xf000}]}, 0x78)

02:43:05 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)

02:43:05 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x9b00, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:05 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:05 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}]}, 0x78)

02:43:05 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) (async)

[ 1664.460996][T30860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:05 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x6c000000)

02:43:05 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xf000, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:05 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000}]}, 0x78)

02:43:05 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xf00000, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:05 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8)
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0})
keyctl$chown(0x4, 0x0, r2, r3)
keyctl$get_persistent(0x16, r2, 0x0)
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0})
keyctl$chown(0x4, 0x0, r4, r5)
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x3}, [{0x2, 0x0, r1}, {0x2, 0x5, r2}, {0x2, 0x1}, {0x2, 0x2}], {0x4, 0x4}, [{0x8, 0x1, 0xee01}, {0x8, 0x5, r5}, {0x8, 0x2, 0xffffffffffffffff}], {0x10, 0x6}, {0x20, 0x4}}, 0x5c, 0x1)
r6 = getpid()
sched_setscheduler(r6, 0x5, &(0x7f0000000380))
r7 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
fcntl$dupfd(r7, 0x0, 0xffffffffffffffff)
kcmp(0xffffffffffffffff, r6, 0x0, r7, 0xffffffffffffffff)
ptrace(0x8, r6)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@dev, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) (async)
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)) (async)
keyctl$chown(0x4, 0x0, r2, r3) (async)
keyctl$get_persistent(0x16, r2, 0x0) (async)
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)) (async)
keyctl$chown(0x4, 0x0, r4, r5) (async)
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x3}, [{0x2, 0x0, r1}, {0x2, 0x5, r2}, {0x2, 0x1}, {0x2, 0x2}], {0x4, 0x4}, [{0x8, 0x1, 0xee01}, {0x8, 0x5, r5}, {0x8, 0x2, 0xffffffffffffffff}], {0x10, 0x6}, {0x20, 0x4}}, 0x5c, 0x1) (async)
getpid() (async)
sched_setscheduler(r6, 0x5, &(0x7f0000000380)) (async)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async)
fcntl$dupfd(r7, 0x0, 0xffffffffffffffff) (async)
kcmp(0xffffffffffffffff, r6, 0x0, r7, 0xffffffffffffffff) (async)
ptrace(0x8, r6) (async)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34) (async)

02:43:05 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)

02:43:05 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:05 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}]}, 0x78)

02:43:05 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x1000000, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:06 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x1800000, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:06 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x74000000)

02:43:06 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000}]}, 0x78)

[ 1664.953856][T31018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1664.991524][T31018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:06 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2000000, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:06 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)

02:43:06 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x5}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:06 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x3000000, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:06 executing program 2:
r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x4, 0x6, 0x5, 0x0, 0x100000000, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80, 0x0, @perf_config_ext={0x2}, 0x2, 0x281, 0xfffffffb, 0x9, 0x86, 0xb, 0x4, 0x0, 0x1, 0x0, 0x8001}, 0xffffffffffffffff, 0x2, r1, 0x1)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0x7, 0x1, 0x0, 0xd, "978af476087535d085c5c8e1f9068e7d78ed71"})
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)

02:43:06 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5000000, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:06 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}]}, 0x78)

02:43:06 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)

02:43:06 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x6}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:06 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x7a000000)

02:43:06 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x6000000, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:06 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)

02:43:06 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}]}, 0x78)

[ 1665.451799][T31120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:06 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x7}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:06 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7000000, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:06 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}]}, 0x78)

02:43:06 executing program 2:
r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x4, 0x6, 0x5, 0x0, 0x100000000, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80, 0x0, @perf_config_ext={0x2}, 0x2, 0x281, 0xfffffffb, 0x9, 0x86, 0xb, 0x4, 0x0, 0x1, 0x0, 0x8001}, 0xffffffffffffffff, 0x2, r1, 0x1) (async)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0x7, 0x1, 0x0, 0xd, "978af476087535d085c5c8e1f9068e7d78ed71"}) (async)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)

02:43:06 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x6}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:06 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x8000000, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:06 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}]}, 0x78)

02:43:06 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x9effffff)

02:43:06 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x8}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:07 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x9000000, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:07 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}]}, 0x78)

[ 1665.929936][T31251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:07 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:07 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xa000000, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:07 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:07 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}]}, 0x78)

02:43:07 executing program 2:
r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x4, 0x6, 0x5, 0x0, 0x100000000, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80, 0x0, @perf_config_ext={0x2}, 0x2, 0x281, 0xfffffffb, 0x9, 0x86, 0xb, 0x4, 0x0, 0x1, 0x0, 0x8001}, 0xffffffffffffffff, 0x2, r1, 0x1)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0x7, 0x1, 0x0, 0xd, "978af476087535d085c5c8e1f9068e7d78ed71"})
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async)
fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x4, 0x6, 0x5, 0x0, 0x100000000, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80, 0x0, @perf_config_ext={0x2}, 0x2, 0x281, 0xfffffffb, 0x9, 0x86, 0xb, 0x4, 0x0, 0x1, 0x0, 0x8001}, 0xffffffffffffffff, 0x2, r1, 0x1) (async)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0x7, 0x1, 0x0, 0xd, "978af476087535d085c5c8e1f9068e7d78ed71"}) (async)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34) (async)

02:43:07 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xb000000, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:07 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x11}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:07 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0xc0000000)

02:43:07 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:07 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000}]}, 0x78)

02:43:07 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000}]}, 0x78)

02:43:07 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xc000000, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:07 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x1d}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

[ 1666.445871][T31283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1666.494942][T31287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:07 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xd000000, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:07 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x8800000000000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:07 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}]}, 0x78)

02:43:07 executing program 2:
socket$inet6(0xa, 0x80005, 0x7d4)
socket$inet6(0xa, 0x3, 0x5)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)

02:43:07 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x45}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:07 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xe000000, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:07 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0xf0ffffff)

02:43:07 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}]}, 0x78)

02:43:07 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x600000000000000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:08 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000}]}, 0x78)

02:43:08 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xf000000, 0x0, 0x38, 0x4}, [{}]}, 0x78)

[ 1666.943083][T31317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:08 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x88}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:08 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0xec010000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:08 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x18000000, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:08 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1a000000}]}, 0x78)

02:43:08 executing program 2:
socket$inet6(0xa, 0x80005, 0x7d4) (async)
socket$inet6(0xa, 0x3, 0x5) (async)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)

02:43:08 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x130}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:08 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0xfcfdffff)

02:43:08 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x1a000000, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:08 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x30010000}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:08 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1b000000}]}, 0x78)

02:43:08 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x3e000000}]}, 0x78)

02:43:08 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x1b000000, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:08 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x132}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

[ 1667.424037][T31347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:08 executing program 1:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)
syz_80211_inject_frame(&(0x7f0000000780)=@device_b, &(0x7f00000007c0)=@mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x67d}, @device_b, @device_a, @initial, {0x4, 0xa66}}, 0x7, @val={0x8c, 0x10, {0x9ba, "983d8e5db117", @short="52cf1e91f563fa40"}}}, 0x2c)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@beacon={@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x277}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0x3}}, 0xbc, @random=0x3ff, 0x1a92, @void, @void, @void, @val={0x4, 0x6, {0x0, 0x3b, 0x561, 0xeb}}, @void, @void, @val={0x25, 0x3, {0x0, 0x8, 0xf1}}, @void, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x1, 0x0, 0x6, 0x1}}, @void, [{0xdd, 0xd8, "7d5d2b8f48e69112cd3b0fdaee41fc6af74d73e313b10dc7a7b16e10126bc170e262d77689301435ca4586f28bcdc28eda01adf82e81665de1cf75dfecf3f01c3113b8513420312940ca00a9399ae5e6563ca974cdc23c56345dde8dba973f1c627ba9c8ccb072b50e6eb5822078eba5be65752bcd94f4317e5160d622e2bd5a596c59ba8ecf2b3f96a2930ff26215b6a21cc08c224bfbe25badebf13d7b4ef64954d49d3d91f8129c0a696b754bffe5e960b554f851583bcef73c561a598489ed661422d3dc3b10f505b7772366ed909a33b62f7fca0d26"}, {0xdd, 0x67, "0029bcbbf64a24f1c7260027e01880e7a11d1ce009216ad3113de13f1085e7cffec24d6e37c08199c654ef76d98ad8add6a8406c7e94f67c1f7bc8039c3d6b8b953f1ffae996f39db4762a965fcf595b16cbc87fb9616ab47e3058c74ebe18a06b1d7e799ad578"}, {0xdd, 0xae, "aba7f8a061ce07a8c90b9dfcb3aae7f353c19e0d651b733584a80402a1908fa1de0d96adf470ab8ec826c6bc3f56f13bb13259bd67de2b2a11a55c7d81ceaf7251ad70c0916e0e754439fa7b7680be4dc94cfa07b36e0e3488bd6aed25f3f66ee59b3a50c9d633252db29a568c85e613a75d1daca144fb0733cc5bc4a5dabf9160c164cc3871b0d7154bc13a5092d30f2d7e711541c1e6f1f89192332746362176492eb574e87a85e68716687207"}, {0xdd, 0xef, "5f695479a3a7b263aa88d27ef4f00934acfb0f36443d7cbd5a4f5bd73f91584bb1f54889c0ca16874dfe7407e8a9c1fe2704106e412e481e509c0248f39e04084c7e3f66a6bbf248f490fe682f3f0f43d31046c64be6524090895085dc93ad4148ecaf3a713ea2040e88fb2743f2ce84658fd91c4009b432efa0517585a440afa6b4481b0483164f38082994b6e02150e6fd9e435969f9eda0805d2b79fd31d8af8e3f36715b0265606b0e34c8b4df7ef38dc5085da8a8196e13a69699c1b9ab3bcf972f5790cb6549151600555197855d6c8b62236574f2d98bc13ad1a853869140b62d0e9493946fa52d940a20a3"}, {0xdd, 0xea, "13a950b34907af34aef3b468811c59a5dca06626f5d4ddd16a3d104581bf3dfc73bee518f2b24993e988d2ed41626f7bf24b8c5e97004747b670f9136e945ba6fa0000e4300418e7322b366874ce2477bbf06f6aea04149bc1f30f199f2ce965ff2607c3d8d25115fbd1796c214e5358f715c50e34c078500bea4b3183231ad2c55c111a7e0f82a37f7847bebbd121a3fa65b28029ae1b8594ef29fbced70f760ea432d04b95099973de13e738e89ea5163eaf77e8738875f93448d9a9d8d150f00d3d19250d035c1eb81bbb07a01d01f3e07b922c511e70b537263b9fc641e9c408dae659f12c05556c"}, {0xdd, 0xb9, "cade1ad3698d4e76194f570c8fea43fa00f652d2253b84d8cc8fea1cad5357eaef3573c882b7853c06729d59a2ea234e1c57aa6fb2d48b53a86f335def2423eddfddea9db8baec4cbf0d0e39c447644d03c73cb364fc6373e2c1819749440940ec0571e8bce7f2dcc2964c0e786157dfbdfcdaeba46af551721a7d0ec9e4d645fe953edfa3ceba27825b2493f0c183a1ce4a628e3c5241cb8e10d3284b7ca47c3419635c852627a1cb0ef6aa682108bce2d631123b93fa9e79"}, {0xdd, 0xb6, "878d2e041b564edcb46025183f260702a21e222a0cf9e46b622501b778fcd9fad6c8f51bf1c5808a624ce01d3395fe8462aaea406d30f61d34ea30c41bf270e63adb67eb467b8905c88bf03591f9559a0c4c13e1e9c77d5e2dd3873b179aad82868d1b1ca98f368943803ee939379e1ee46232d6de7dfb7b252a609faa1a1834f363a3ce89eceed9c643a0f09cbd8534b340bba94a4b684cc11d2edf264bcf490a6c9aebdf447e6ac2f88ff8e288ef16a269e744ad01"}, {0xdd, 0xaf, "6f31fa8cf6443fc3e1e3743862d97b52cb60c92e4384ba1e0e669683fb09fcc4bcc16d701644ad66de03e611493cae1b9aea4212d5c744215feb38d8db14645d6a572bbab34021e1d096d6e159922281a57effb3150c11dea12c5aee805574e47738f76a5522d87c0e3f707e64f0f9317059c22fc908c346074c1935c48add9c7ccbf09fd61476cb2165bc61102a5ccfb413dfe0a1865f0f36aa3efabc892e3798d7863f2b6c34adf385fc7f8fddbc"}, {0xdd, 0xb0, "fac38d93e1cb6036f4eef97f44c65ca54bed9556563a9f69d3f3df70dbf7b757b2bd1bd0505a2e03691073b0f7b3ad9c911da212f12644438688651fd2da0f94482e7e575e334e669be13116a3a546d15c88cda49d69fa53d77a20c99bd2beab376c294fe629e62f00cbe2d18b4fde1e083961a174de41fb45736e98c1b6b008807a7f4f08f4cb2b07ad4efca0aa7e0ecd04946d10882ba0d83d4ac3d04c4f4619c206c2b98339af54d3bb45368c77f6"}]}, 0x6e0)

02:43:08 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x3e000000, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:08 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x182}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

[ 1667.600198][T31360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1667.630314][T31360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1667.651767][T31360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:08 executing program 2:
socket$inet6(0xa, 0x80005, 0x7d4)
socket$inet6(0xa, 0x3, 0x5)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)
socket$inet6(0xa, 0x80005, 0x7d4) (async)
socket$inet6(0xa, 0x3, 0x5) (async)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34) (async)

02:43:08 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x7f000000}]}, 0x78)

02:43:08 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x4b000000, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:08 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0xfcffffff)

02:43:08 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x196}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:08 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x78000000, 0x0, 0x38, 0x4}, [{}]}, 0x78)

[ 1667.832842][T31373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1667.842367][T31375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:09 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x1dd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:09 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x9b000000}]}, 0x78)

02:43:09 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7f000000, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:09 executing program 1:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)
syz_80211_inject_frame(&(0x7f0000000780)=@device_b, &(0x7f00000007c0)=@mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x67d}, @device_b, @device_a, @initial, {0x4, 0xa66}}, 0x7, @val={0x8c, 0x10, {0x9ba, "983d8e5db117", @short="52cf1e91f563fa40"}}}, 0x2c)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@beacon={@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x277}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0x3}}, 0xbc, @random=0x3ff, 0x1a92, @void, @void, @void, @val={0x4, 0x6, {0x0, 0x3b, 0x561, 0xeb}}, @void, @void, @val={0x25, 0x3, {0x0, 0x8, 0xf1}}, @void, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x1, 0x0, 0x6, 0x1}}, @void, [{0xdd, 0xd8, "7d5d2b8f48e69112cd3b0fdaee41fc6af74d73e313b10dc7a7b16e10126bc170e262d77689301435ca4586f28bcdc28eda01adf82e81665de1cf75dfecf3f01c3113b8513420312940ca00a9399ae5e6563ca974cdc23c56345dde8dba973f1c627ba9c8ccb072b50e6eb5822078eba5be65752bcd94f4317e5160d622e2bd5a596c59ba8ecf2b3f96a2930ff26215b6a21cc08c224bfbe25badebf13d7b4ef64954d49d3d91f8129c0a696b754bffe5e960b554f851583bcef73c561a598489ed661422d3dc3b10f505b7772366ed909a33b62f7fca0d26"}, {0xdd, 0x67, "0029bcbbf64a24f1c7260027e01880e7a11d1ce009216ad3113de13f1085e7cffec24d6e37c08199c654ef76d98ad8add6a8406c7e94f67c1f7bc8039c3d6b8b953f1ffae996f39db4762a965fcf595b16cbc87fb9616ab47e3058c74ebe18a06b1d7e799ad578"}, {0xdd, 0xae, "aba7f8a061ce07a8c90b9dfcb3aae7f353c19e0d651b733584a80402a1908fa1de0d96adf470ab8ec826c6bc3f56f13bb13259bd67de2b2a11a55c7d81ceaf7251ad70c0916e0e754439fa7b7680be4dc94cfa07b36e0e3488bd6aed25f3f66ee59b3a50c9d633252db29a568c85e613a75d1daca144fb0733cc5bc4a5dabf9160c164cc3871b0d7154bc13a5092d30f2d7e711541c1e6f1f89192332746362176492eb574e87a85e68716687207"}, {0xdd, 0xef, "5f695479a3a7b263aa88d27ef4f00934acfb0f36443d7cbd5a4f5bd73f91584bb1f54889c0ca16874dfe7407e8a9c1fe2704106e412e481e509c0248f39e04084c7e3f66a6bbf248f490fe682f3f0f43d31046c64be6524090895085dc93ad4148ecaf3a713ea2040e88fb2743f2ce84658fd91c4009b432efa0517585a440afa6b4481b0483164f38082994b6e02150e6fd9e435969f9eda0805d2b79fd31d8af8e3f36715b0265606b0e34c8b4df7ef38dc5085da8a8196e13a69699c1b9ab3bcf972f5790cb6549151600555197855d6c8b62236574f2d98bc13ad1a853869140b62d0e9493946fa52d940a20a3"}, {0xdd, 0xea, "13a950b34907af34aef3b468811c59a5dca06626f5d4ddd16a3d104581bf3dfc73bee518f2b24993e988d2ed41626f7bf24b8c5e97004747b670f9136e945ba6fa0000e4300418e7322b366874ce2477bbf06f6aea04149bc1f30f199f2ce965ff2607c3d8d25115fbd1796c214e5358f715c50e34c078500bea4b3183231ad2c55c111a7e0f82a37f7847bebbd121a3fa65b28029ae1b8594ef29fbced70f760ea432d04b95099973de13e738e89ea5163eaf77e8738875f93448d9a9d8d150f00d3d19250d035c1eb81bbb07a01d01f3e07b922c511e70b537263b9fc641e9c408dae659f12c05556c"}, {0xdd, 0xb9, "cade1ad3698d4e76194f570c8fea43fa00f652d2253b84d8cc8fea1cad5357eaef3573c882b7853c06729d59a2ea234e1c57aa6fb2d48b53a86f335def2423eddfddea9db8baec4cbf0d0e39c447644d03c73cb364fc6373e2c1819749440940ec0571e8bce7f2dcc2964c0e786157dfbdfcdaeba46af551721a7d0ec9e4d645fe953edfa3ceba27825b2493f0c183a1ce4a628e3c5241cb8e10d3284b7ca47c3419635c852627a1cb0ef6aa682108bce2d631123b93fa9e79"}, {0xdd, 0xb6, "878d2e041b564edcb46025183f260702a21e222a0cf9e46b622501b778fcd9fad6c8f51bf1c5808a624ce01d3395fe8462aaea406d30f61d34ea30c41bf270e63adb67eb467b8905c88bf03591f9559a0c4c13e1e9c77d5e2dd3873b179aad82868d1b1ca98f368943803ee939379e1ee46232d6de7dfb7b252a609faa1a1834f363a3ce89eceed9c643a0f09cbd8534b340bba94a4b684cc11d2edf264bcf490a6c9aebdf447e6ac2f88ff8e288ef16a269e744ad01"}, {0xdd, 0xaf, "6f31fa8cf6443fc3e1e3743862d97b52cb60c92e4384ba1e0e669683fb09fcc4bcc16d701644ad66de03e611493cae1b9aea4212d5c744215feb38d8db14645d6a572bbab34021e1d096d6e159922281a57effb3150c11dea12c5aee805574e47738f76a5522d87c0e3f707e64f0f9317059c22fc908c346074c1935c48add9c7ccbf09fd61476cb2165bc61102a5ccfb413dfe0a1865f0f36aa3efabc892e3798d7863f2b6c34adf385fc7f8fddbc"}, {0xdd, 0xb0, "fac38d93e1cb6036f4eef97f44c65ca54bed9556563a9f69d3f3df70dbf7b757b2bd1bd0505a2e03691073b0f7b3ad9c911da212f12644438688651fd2da0f94482e7e575e334e669be13116a3a546d15c88cda49d69fa53d77a20c99bd2beab376c294fe629e62f00cbe2d18b4fde1e083961a174de41fb45736e98c1b6b008807a7f4f08f4cb2b07ad4efca0aa7e0ecd04946d10882ba0d83d4ac3d04c4f4619c206c2b98339af54d3bb45368c77f6"}]}, 0x6e0)

02:43:09 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x1ec}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:09 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}]}, 0x78)

[ 1668.082675][T31387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:09 executing program 2:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)
nanosleep(&(0x7f0000000000), &(0x7f0000000080))
syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000100)=@ctrl_frame=@pspoll={{}, @random=0xf360, @initial, @broadcast}, 0x10)

02:43:09 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x80ffffff, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:09 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0xfeffffff)

02:43:09 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x210}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:09 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xf0000000000000}]}, 0x78)

02:43:09 executing program 1:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)
syz_80211_inject_frame(&(0x7f0000000780)=@device_b, &(0x7f00000007c0)=@mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x67d}, @device_b, @device_a, @initial, {0x4, 0xa66}}, 0x7, @val={0x8c, 0x10, {0x9ba, "983d8e5db117", @short="52cf1e91f563fa40"}}}, 0x2c)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@beacon={@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x277}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0x3}}, 0xbc, @random=0x3ff, 0x1a92, @void, @void, @void, @val={0x4, 0x6, {0x0, 0x3b, 0x561, 0xeb}}, @void, @void, @val={0x25, 0x3, {0x0, 0x8, 0xf1}}, @void, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x1, 0x0, 0x6, 0x1}}, @void, [{0xdd, 0xd8, "7d5d2b8f48e69112cd3b0fdaee41fc6af74d73e313b10dc7a7b16e10126bc170e262d77689301435ca4586f28bcdc28eda01adf82e81665de1cf75dfecf3f01c3113b8513420312940ca00a9399ae5e6563ca974cdc23c56345dde8dba973f1c627ba9c8ccb072b50e6eb5822078eba5be65752bcd94f4317e5160d622e2bd5a596c59ba8ecf2b3f96a2930ff26215b6a21cc08c224bfbe25badebf13d7b4ef64954d49d3d91f8129c0a696b754bffe5e960b554f851583bcef73c561a598489ed661422d3dc3b10f505b7772366ed909a33b62f7fca0d26"}, {0xdd, 0x67, "0029bcbbf64a24f1c7260027e01880e7a11d1ce009216ad3113de13f1085e7cffec24d6e37c08199c654ef76d98ad8add6a8406c7e94f67c1f7bc8039c3d6b8b953f1ffae996f39db4762a965fcf595b16cbc87fb9616ab47e3058c74ebe18a06b1d7e799ad578"}, {0xdd, 0xae, "aba7f8a061ce07a8c90b9dfcb3aae7f353c19e0d651b733584a80402a1908fa1de0d96adf470ab8ec826c6bc3f56f13bb13259bd67de2b2a11a55c7d81ceaf7251ad70c0916e0e754439fa7b7680be4dc94cfa07b36e0e3488bd6aed25f3f66ee59b3a50c9d633252db29a568c85e613a75d1daca144fb0733cc5bc4a5dabf9160c164cc3871b0d7154bc13a5092d30f2d7e711541c1e6f1f89192332746362176492eb574e87a85e68716687207"}, {0xdd, 0xef, "5f695479a3a7b263aa88d27ef4f00934acfb0f36443d7cbd5a4f5bd73f91584bb1f54889c0ca16874dfe7407e8a9c1fe2704106e412e481e509c0248f39e04084c7e3f66a6bbf248f490fe682f3f0f43d31046c64be6524090895085dc93ad4148ecaf3a713ea2040e88fb2743f2ce84658fd91c4009b432efa0517585a440afa6b4481b0483164f38082994b6e02150e6fd9e435969f9eda0805d2b79fd31d8af8e3f36715b0265606b0e34c8b4df7ef38dc5085da8a8196e13a69699c1b9ab3bcf972f5790cb6549151600555197855d6c8b62236574f2d98bc13ad1a853869140b62d0e9493946fa52d940a20a3"}, {0xdd, 0xea, "13a950b34907af34aef3b468811c59a5dca06626f5d4ddd16a3d104581bf3dfc73bee518f2b24993e988d2ed41626f7bf24b8c5e97004747b670f9136e945ba6fa0000e4300418e7322b366874ce2477bbf06f6aea04149bc1f30f199f2ce965ff2607c3d8d25115fbd1796c214e5358f715c50e34c078500bea4b3183231ad2c55c111a7e0f82a37f7847bebbd121a3fa65b28029ae1b8594ef29fbced70f760ea432d04b95099973de13e738e89ea5163eaf77e8738875f93448d9a9d8d150f00d3d19250d035c1eb81bbb07a01d01f3e07b922c511e70b537263b9fc641e9c408dae659f12c05556c"}, {0xdd, 0xb9, "cade1ad3698d4e76194f570c8fea43fa00f652d2253b84d8cc8fea1cad5357eaef3573c882b7853c06729d59a2ea234e1c57aa6fb2d48b53a86f335def2423eddfddea9db8baec4cbf0d0e39c447644d03c73cb364fc6373e2c1819749440940ec0571e8bce7f2dcc2964c0e786157dfbdfcdaeba46af551721a7d0ec9e4d645fe953edfa3ceba27825b2493f0c183a1ce4a628e3c5241cb8e10d3284b7ca47c3419635c852627a1cb0ef6aa682108bce2d631123b93fa9e79"}, {0xdd, 0xb6, "878d2e041b564edcb46025183f260702a21e222a0cf9e46b622501b778fcd9fad6c8f51bf1c5808a624ce01d3395fe8462aaea406d30f61d34ea30c41bf270e63adb67eb467b8905c88bf03591f9559a0c4c13e1e9c77d5e2dd3873b179aad82868d1b1ca98f368943803ee939379e1ee46232d6de7dfb7b252a609faa1a1834f363a3ce89eceed9c643a0f09cbd8534b340bba94a4b684cc11d2edf264bcf490a6c9aebdf447e6ac2f88ff8e288ef16a269e744ad01"}, {0xdd, 0xaf, "6f31fa8cf6443fc3e1e3743862d97b52cb60c92e4384ba1e0e669683fb09fcc4bcc16d701644ad66de03e611493cae1b9aea4212d5c744215feb38d8db14645d6a572bbab34021e1d096d6e159922281a57effb3150c11dea12c5aee805574e47738f76a5522d87c0e3f707e64f0f9317059c22fc908c346074c1935c48add9c7ccbf09fd61476cb2165bc61102a5ccfb413dfe0a1865f0f36aa3efabc892e3798d7863f2b6c34adf385fc7f8fddbc"}, {0xdd, 0xb0, "fac38d93e1cb6036f4eef97f44c65ca54bed9556563a9f69d3f3df70dbf7b757b2bd1bd0505a2e03691073b0f7b3ad9c911da212f12644438688651fd2da0f94482e7e575e334e669be13116a3a546d15c88cda49d69fa53d77a20c99bd2beab376c294fe629e62f00cbe2d18b4fde1e083961a174de41fb45736e98c1b6b008807a7f4f08f4cb2b07ad4efca0aa7e0ecd04946d10882ba0d83d4ac3d04c4f4619c206c2b98339af54d3bb45368c77f6"}]}, 0x6e0)

[ 1668.274013][T31489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1668.284130][T31489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:09 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x221}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:09 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}]}, 0x78)

[ 1668.334150][T31505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1668.349222][T31505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:09 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x9b000000, 0x0, 0x38, 0x4}, [{}]}, 0x78)

[ 1668.392366][T31505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:09 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xffffff80, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:09 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x257}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:09 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x180000000000000}]}, 0x78)

02:43:09 executing program 2:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34) (async)
nanosleep(&(0x7f0000000000), &(0x7f0000000080)) (async)
syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000100)=@ctrl_frame=@pspoll={{}, @random=0xf360, @initial, @broadcast}, 0x10)

02:43:09 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0xff0f0000)

[ 1668.537092][ T1228] ieee802154 phy0 wpan0: encryption failed: -22
[ 1668.537145][ T1228] ieee802154 phy1 wpan1: encryption failed: -22
02:43:09 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x300}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:09 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:09 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}]}, 0x78)

[ 1668.688988][T31524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:09 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x35c}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:09 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x700}]}, 0x78)

02:43:09 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x38, 0x4}, [{}]}, 0x78)

[ 1668.745466][T31526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:09 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}]}, 0x78)

02:43:09 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x3, 0x38, 0x4}, [{}]}, 0x78)

02:43:10 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x1d}}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:10 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x392}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:10 executing program 2:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34) (async)
nanosleep(&(0x7f0000000000), &(0x7f0000000080))
syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000100)=@ctrl_frame=@pspoll={{}, @random=0xf360, @initial, @broadcast}, 0x10)

02:43:10 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}]}, 0x78)

02:43:10 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000, 0x40, 0x0, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x78)

02:43:10 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x3cb}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:10 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5, 0x38, 0x4}, [{}]}, 0x78)

02:43:10 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0xfffff000)

02:43:10 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x6, 0x38, 0x4}, [{}]}, 0x78)

02:43:10 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x8000000}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:10 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x3d2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:10 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}]}, 0x78)

[ 1669.203843][T31563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1669.231353][T31564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:10 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x7, 0x38, 0x4}, [{}]}, 0x78)

02:43:10 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x3ea}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:10 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}]}, 0x78)

02:43:10 executing program 2:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000080)=@ctrl_frame=@pspoll={{}, @random=0x8, @initial, @broadcast}, 0x10)
syz_80211_inject_frame(&(0x7f00000000c0)=@broadcast, &(0x7f0000000100)=@mgmt_frame=@deauth={@wo_ht={{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x2}, @broadcast, @device_a, @from_mac=@broadcast, {0x8, 0xfc0}}, 0x31, @void}, 0x1a)

02:43:10 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x8, 0x38, 0x4}, [{}]}, 0x78)

02:43:10 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x9601}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:10 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0xfffffdfc)

02:43:10 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x500}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:10 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}]}, 0x78)

02:43:10 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x9, 0x38, 0x4}, [{}]}, 0x78)

02:43:10 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000}]}, 0x78)

02:43:10 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x600}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

[ 1669.676331][T31592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1669.680929][T31598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:10 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x500}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

[ 1669.755206][T31600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:10 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xa, 0x38, 0x4}, [{}]}, 0x78)

02:43:10 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x700}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:11 executing program 2:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000080)=@ctrl_frame=@pspoll={{}, @random=0x8, @initial, @broadcast}, 0x10) (async)
syz_80211_inject_frame(&(0x7f00000000c0)=@broadcast, &(0x7f0000000100)=@mgmt_frame=@deauth={@wo_ht={{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x2}, @broadcast, @device_a, @from_mac=@broadcast, {0x8, 0xfc0}}, 0x31, @void}, 0x1a)

02:43:11 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000}]}, 0x78)

02:43:11 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xb, 0x38, 0x4}, [{}]}, 0x78)

02:43:11 executing program 1:
r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
syz_80211_inject_frame(&(0x7f0000000080), &(0x7f0000000000)=ANY=[@ANYRES16=r1], 0x34)

02:43:11 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0xffffff9e)

02:43:11 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0xc00}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:11 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xc, 0x38, 0x4}, [{}]}, 0x78)

[ 1670.213058][T31622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1670.236609][T31627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:11 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x1002}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

[ 1670.241683][T31627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1670.245841][T31628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:11 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xd, 0x38, 0x4}, [{}]}, 0x78)

02:43:11 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000}]}, 0x78)

02:43:11 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x1100}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:11 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000}]}, 0x78)

02:43:11 executing program 2:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34) (async)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000080)=@ctrl_frame=@pspoll={{}, @random=0x8, @initial, @broadcast}, 0x10) (async)
syz_80211_inject_frame(&(0x7f00000000c0)=@broadcast, &(0x7f0000000100)=@mgmt_frame=@deauth={@wo_ht={{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x2}, @broadcast, @device_a, @from_mac=@broadcast, {0x8, 0xfc0}}, 0x31, @void}, 0x1a)

02:43:11 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xe, 0x38, 0x4}, [{}]}, 0x78)

02:43:11 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0xfffffff0)

02:43:11 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x1d00}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:11 executing program 1:
r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
syz_80211_inject_frame(&(0x7f0000000080), &(0x7f0000000000)=ANY=[@ANYRES16=r1], 0x34)

02:43:11 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000000000}]}, 0x78)

[ 1670.603688][T31650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1670.637616][T31654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:11 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xf, 0x38, 0x4}, [{}]}, 0x78)

02:43:11 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x2102}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:11 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1a00000000000000}]}, 0x78)

[ 1670.650621][T31655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:11 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x18, 0x38, 0x4}, [{}]}, 0x78)

02:43:11 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x3001}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:11 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1b00000000000000}]}, 0x78)

02:43:12 executing program 2:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000080)=ANY=[], 0x34)
syz_80211_inject_frame(&(0x7f0000000140), &(0x7f0000000180)=@ctrl_frame=@cf_end={{}, {0x8}, @broadcast}, 0x10)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@mgmt_frame=@probe_request={@with_ht={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, {0x3}, @device_a, @broadcast, @from_mac=@broadcast, {0x0, 0x800}}, @ver_80211n={0x0, 0x2800, 0x1, 0x3, 0x0, 0x1, 0x1}}, @void, @val={0x1, 0x4, [{0x6e}, {0x5}, {0x36, 0x1}, {0x12}]}, @void, @val={0x2d, 0x1a, {0x300, 0x3, 0x0, 0x0, {0x1, 0x12fa, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x800, 0x200, 0x4}}, @void, [{0xdd, 0x70, "d7c9f1fc468b5718aa7d4cd70d35623917723696af6b0b10e00dfb4e9e6137d1888ecfbf20ccb3cc39057a033259164aa9a25b2a7f2f9c3b46eb3dace3d5ad9796e9dc3990d3dc0afc87b998348cf2f1810cb10aa5cec6a044d1ddfbe7cf3f887ebdd8f9cdcde140166bbaa0b741541e"}]}, 0xb0)

02:43:12 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x1a, 0x38, 0x4}, [{}]}, 0x78)

02:43:12 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x3201}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:12 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0xfffffffc)

02:43:12 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x3e00000000000000}]}, 0x78)

02:43:12 executing program 1:
r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
syz_80211_inject_frame(&(0x7f0000000080), &(0x7f0000000000)=ANY=[@ANYRES16=r1], 0x34)

02:43:12 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x1b, 0x38, 0x4}, [{}]}, 0x78)

02:43:12 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x4000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:12 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00000000000000}]}, 0x78)

[ 1671.069504][T31681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1671.094419][T31684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1671.169677][T31686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:12 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x9b00000000000000}]}, 0x78)

02:43:12 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x3e, 0x38, 0x4}, [{}]}, 0x78)

02:43:12 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x4500}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

[ 1671.220398][T31684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:12 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}, 0x78)

02:43:12 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4b, 0x38, 0x4}, [{}]}, 0x78)

02:43:12 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x5702}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:12 executing program 2:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000080)=ANY=[], 0x34)
syz_80211_inject_frame(&(0x7f0000000140), &(0x7f0000000180)=@ctrl_frame=@cf_end={{}, {0x8}, @broadcast}, 0x10)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@mgmt_frame=@probe_request={@with_ht={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, {0x3}, @device_a, @broadcast, @from_mac=@broadcast, {0x0, 0x800}}, @ver_80211n={0x0, 0x2800, 0x1, 0x3, 0x0, 0x1, 0x1}}, @void, @val={0x1, 0x4, [{0x6e}, {0x5}, {0x36, 0x1}, {0x12}]}, @void, @val={0x2d, 0x1a, {0x300, 0x3, 0x0, 0x0, {0x1, 0x12fa, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x800, 0x200, 0x4}}, @void, [{0xdd, 0x70, "d7c9f1fc468b5718aa7d4cd70d35623917723696af6b0b10e00dfb4e9e6137d1888ecfbf20ccb3cc39057a033259164aa9a25b2a7f2f9c3b46eb3dace3d5ad9796e9dc3990d3dc0afc87b998348cf2f1810cb10aa5cec6a044d1ddfbe7cf3f887ebdd8f9cdcde140166bbaa0b741541e"}]}, 0xb0)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000080)=ANY=[], 0x34) (async)
syz_80211_inject_frame(&(0x7f0000000140), &(0x7f0000000180)=@ctrl_frame=@cf_end={{}, {0x8}, @broadcast}, 0x10) (async)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@mgmt_frame=@probe_request={@with_ht={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, {0x3}, @device_a, @broadcast, @from_mac=@broadcast, {0x0, 0x800}}, @ver_80211n={0x0, 0x2800, 0x1, 0x3, 0x0, 0x1, 0x1}}, @void, @val={0x1, 0x4, [{0x6e}, {0x5}, {0x36, 0x1}, {0x12}]}, @void, @val={0x2d, 0x1a, {0x300, 0x3, 0x0, 0x0, {0x1, 0x12fa, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x800, 0x200, 0x4}}, @void, [{0xdd, 0x70, "d7c9f1fc468b5718aa7d4cd70d35623917723696af6b0b10e00dfb4e9e6137d1888ecfbf20ccb3cc39057a033259164aa9a25b2a7f2f9c3b46eb3dace3d5ad9796e9dc3990d3dc0afc87b998348cf2f1810cb10aa5cec6a044d1ddfbe7cf3f887ebdd8f9cdcde140166bbaa0b741541e"}]}, 0xb0) (async)

02:43:12 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0xfffffffe)

02:43:12 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x3001}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:12 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x78, 0x38, 0x4}, [{}]}, 0x78)

02:43:12 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}, 0x78)

02:43:12 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x5c03}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

[ 1671.675688][T31712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:12 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x700}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

[ 1671.728605][T31712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1671.753365][T31712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:12 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x9b, 0x38, 0x4}, [{}]}, 0x78)

02:43:12 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}]}, 0x78)

02:43:12 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x8201}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

[ 1671.801807][T31712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:13 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x88}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

[ 1671.861078][T31723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:13 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x8800}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:13 executing program 2:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000080)=ANY=[], 0x34)
syz_80211_inject_frame(&(0x7f0000000140), &(0x7f0000000180)=@ctrl_frame=@cf_end={{}, {0x8}, @broadcast}, 0x10) (async)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@mgmt_frame=@probe_request={@with_ht={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, {0x3}, @device_a, @broadcast, @from_mac=@broadcast, {0x0, 0x800}}, @ver_80211n={0x0, 0x2800, 0x1, 0x3, 0x0, 0x1, 0x1}}, @void, @val={0x1, 0x4, [{0x6e}, {0x5}, {0x36, 0x1}, {0x12}]}, @void, @val={0x2d, 0x1a, {0x300, 0x3, 0x0, 0x0, {0x1, 0x12fa, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x800, 0x200, 0x4}}, @void, [{0xdd, 0x70, "d7c9f1fc468b5718aa7d4cd70d35623917723696af6b0b10e00dfb4e9e6137d1888ecfbf20ccb3cc39057a033259164aa9a25b2a7f2f9c3b46eb3dace3d5ad9796e9dc3990d3dc0afc87b998348cf2f1810cb10aa5cec6a044d1ddfbe7cf3f887ebdd8f9cdcde140166bbaa0b741541e"}]}, 0xb0)

02:43:13 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xf0, 0x38, 0x4}, [{}]}, 0x78)

02:43:13 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, 0x78)

02:43:13 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x1000000000000)

02:43:13 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x9203}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:13 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x7}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:13 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x9601}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

[ 1672.203142][T31745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1672.248293][T31751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:13 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x180, 0x38, 0x4}, [{}]}, 0x78)

02:43:13 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}]}, 0x78)

[ 1672.309636][T31756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:13 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x300, 0x38, 0x4}, [{}]}, 0x78)

02:43:13 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x10020000}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:13 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0xcb03}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:13 executing program 2:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000080)=@data_frame={@qos_ht={{{@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1}, @device_a, @device_b, @random="0f09d760e3e2", {0x4, 0x9}}, {0x1, 0x1, 0x0, 0x0, 0x3}}, {@type11={{0x0, 0x2, 0xc, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x2}, @device_b, @device_b, @random="664a40da633d", {0x5, 0x3}, @device_b}, {0x9, 0x0, 0x1, 0x1, 0xd7}}}, @ver_80211n={0x0, 0x20, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1}}, @random="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"}, 0x742)

02:43:13 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}]}, 0x78)

02:43:13 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x500, 0x38, 0x4}, [{}]}, 0x78)

02:43:13 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0xd203}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:13 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x3000000000000)

02:43:13 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x500}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:13 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0xdd01}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

[ 1672.689379][T31784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:13 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x500}}, @common=@unspec=@devgroup={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

[ 1672.728338][T31787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1672.747716][T31787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:13 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x600, 0x38, 0x4}, [{}]}, 0x78)

02:43:13 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0xea03}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:14 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}]}, 0x78)

02:43:14 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x700, 0x38, 0x4}, [{}]}, 0x78)

02:43:14 executing program 2:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000080)=@data_frame={@qos_ht={{{@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1}, @device_a, @device_b, @random="0f09d760e3e2", {0x4, 0x9}}, {0x1, 0x1, 0x0, 0x0, 0x3}}, {@type11={{0x0, 0x2, 0xc, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x2}, @device_b, @device_b, @random="664a40da633d", {0x5, 0x3}, @device_b}, {0x9, 0x0, 0x1, 0x1, 0xd7}}}, @ver_80211n={0x0, 0x20, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1}}, @random="b0f57dd39bdc7ea389316fab2ea2b4ac56867d539b6bd73839c860e51640dbf90d364ed2dcb306e02e2fca9f058d4b191121395f822c81b19c3a3bc8959a724d3b6d4fb03335cc8a53b1f6f9a6d1d938dfadadce69f782d0edd3f40b5cb0fc49f2af7b768054331931ea270117f9cac36b4e6bb24e3509c09e79a6fa5b6da074f7647e34bd8b708db6b66b5a8402a2974e72c66ae64055a63632aa551dd0a3675e4f4916be95b244410f0dcf281a913ffe1991e216aca61218a8454c125a39c835f6e305ae67730ffa41161b21ce8ef8f0764f4b26018c0d579999f10bc9d71fb752eecd38a9c299fb1ffbe641bd3b994238a39509a8a117223f78bce5aac2956b1071a83cf2f4e26f6561b4237e187227f680d4ec4559ca7a9766d2e44614ea4206f189647c78d387d82a97b79eceabb82e02029f16b880e46088e1e9ae2fa7449151d69bc817bf5e800fe9602b844f87cc402bba30bd8522873de8eb27de8a43857c736faec960cbd4a23493da6ed442c07c5cb796c0edbae92b7c1ffc2347560693212c24733316b1725f1eeb9128590f1f101da7dc2afcdeeaf49207b69a1b642a4864b266f1bfffb170bae6b568ed56dfafe7babdc8ae2c2f5c9ee82457a349788f1d210cdd0127b21dadf53cc0e94600b4742a4761da09978c2731d34622a09fca4b9eee499ebd16ce21329b3864a1f100bf081596f9ac43ac9bb3b1be4c47f935608ed8e22f9003d24b204f28f41676bce9175631a12b58121ae8140bc0545979fe3def460c15b5f2de223ff97f9634aa038e65650dc89e63d9557dffd5557ab6f2d3286f569ff6fdab80d270e8baf7409e6183f374b455b637e155344404a0dc0738d347b792326c8aa0d33411c0d818df47e602292bbab8746fd37c0a91935810bd77ee1d8488310a6a1635698f66164eaed5106d527907fa9039cd95a8bf5246ea322fdbf2d891c66b3f9648c833943fe78253c5b40a0d21b730a81869cd60031ad4efb3d62d465669ac8fa60efcc6c526e1ab57a8220d8b4e6a3425677bbd3fe4b7fd1846631c8fc9c921b9e80a860ba044247c4812339ec49afa88adb7af96724d57a6067c6bc62df3afd7dd2910e106a0f18b74dc152d85e8851fd81b25235d275073b74779e0a9e0048110a0807a8a4a47dfa607c1bbb541f64c6d636c53c527608409aedf2014efc03778eb835f93eb4aaecf5bdba76e153e805a6333339244f258d568783450547d2bc5d98c2161034dde1e6417b29f8a163a02493c94571b6ddb53c37157431a8caa0d94326fc93d5c4ea66572df39115ac6ba6601de666d33907c3bda327edfc09ad6d37983036f54b619dac4b8a4f6831bc53ca34308474e2867e89ee88f8b726994c684f7c3088fd8df524c427ab00296393028eb385af85dca0740f91d76c343447898641c0fb3dc023af6234664e486e4306f39719104242db9cd1a542d8750675c9e6a543bfc83d5631a53eb8496f94f6d4631eee4a1183d928a0b6945d1cc1f8c904f6abe01590b446eabb4ef02a421daeb1e68d4e804f67428f456eea5973d6e2375685c200dc8b54a93d1d23b0730ae4b1238761adab1a1a7fcf7970955f7164d4a89c4e51eb1e88261485c15d1843ed7c911a7106394104239f2990aad6fac4dcaf9bd283679b69cc7d542efe225c48606973994fb45a311f2b2a9fa15bdfb04636159e2e8e63373bc88b324c43ab2dbb2564a27e7e88565648cd80743f3dd1beb290b707ae2205d0dbc0b9603fcedd6426eb2251360105db759af1992fc4f7fd7c049c74ad7d101d132eb0b6c0297be82964beaa6b593006163dcacadba787056bbc556b82e3bda844afc46f11ec860b93f43efd2b11cb983007b2ba5f516326d129a3c4a3b4a1dd8759d6a3947dccc750668d647bd27d33874d6a9eaafa8e58b638c5031172912ed8e5076534fed0595c3c0022689337c778681aa1831419052b229018fb7c7ce2de57cb6e2701c39aa71d9379c662ac92c414cdd257104b862145887b66b55ccf87be9e57810dc0012f25a4232e559d7b0b6967a68cda92319f2e1e76357204a7f07f02a5579f12e96a754b1b8505f67c31005dee99dc7d33cb6a429454bff3804efa3130a8d3071730697e7c43d5478a02749b6a3972f5ca07fcb00cb79d2f096c9b376d4f8fd2ee545f4da4486b10380b0f285e13f7b1ac2f2eb0203817a4ca458e6f772e95ebc799e0aedbea0cc236a10bc66dbb7a2bf24c1ce1bce25fe5e3434021164d51e016bc70bf706517b443a4e39e0afb2df41e884ba45d981b44b199c595d8d1b1ee1571d67b07eeae444671b16a1deb0ee5859d1bf43d889a48767fc1c7bfa8677727e3754423f2141d23872b749d66f016ba469733342e0d5d67d1c44f1ffff5c232037fd5d7d2b934a23e7218122e63351696f12670ae72feca983f29dab1718bb5c8f0cbc9904fe1d42161145226bc63cb85a8c7363a0d3c0af1f26d763287591e5e4c708bd568e392b9ef95082b7dafb6b302fcd617bda1c4ee3172bdc681d36"}, 0x742)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34) (async)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000080)=@data_frame={@qos_ht={{{@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1}, @device_a, @device_b, @random="0f09d760e3e2", {0x4, 0x9}}, {0x1, 0x1, 0x0, 0x0, 0x3}}, {@type11={{0x0, 0x2, 0xc, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x2}, @device_b, @device_b, @random="664a40da633d", {0x5, 0x3}, @device_b}, {0x9, 0x0, 0x1, 0x1, 0xd7}}}, @ver_80211n={0x0, 0x20, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1}}, @random="b0f57dd39bdc7ea389316fab2ea2b4ac56867d539b6bd73839c860e51640dbf90d364ed2dcb306e02e2fca9f058d4b191121395f822c81b19c3a3bc8959a724d3b6d4fb03335cc8a53b1f6f9a6d1d938dfadadce69f782d0edd3f40b5cb0fc49f2af7b768054331931ea270117f9cac36b4e6bb24e3509c09e79a6fa5b6da074f7647e34bd8b708db6b66b5a8402a2974e72c66ae64055a63632aa551dd0a3675e4f4916be95b244410f0dcf281a913ffe1991e216aca61218a8454c125a39c835f6e305ae67730ffa41161b21ce8ef8f0764f4b26018c0d579999f10bc9d71fb752eecd38a9c299fb1ffbe641bd3b994238a39509a8a117223f78bce5aac2956b1071a83cf2f4e26f6561b4237e187227f680d4ec4559ca7a9766d2e44614ea4206f189647c78d387d82a97b79eceabb82e02029f16b880e46088e1e9ae2fa7449151d69bc817bf5e800fe9602b844f87cc402bba30bd8522873de8eb27de8a43857c736faec960cbd4a23493da6ed442c07c5cb796c0edbae92b7c1ffc2347560693212c24733316b1725f1eeb9128590f1f101da7dc2afcdeeaf49207b69a1b642a4864b266f1bfffb170bae6b568ed56dfafe7babdc8ae2c2f5c9ee82457a349788f1d210cdd0127b21dadf53cc0e94600b4742a4761da09978c2731d34622a09fca4b9eee499ebd16ce21329b3864a1f100bf081596f9ac43ac9bb3b1be4c47f935608ed8e22f9003d24b204f28f41676bce9175631a12b58121ae8140bc0545979fe3def460c15b5f2de223ff97f9634aa038e65650dc89e63d9557dffd5557ab6f2d3286f569ff6fdab80d270e8baf7409e6183f374b455b637e155344404a0dc0738d347b792326c8aa0d33411c0d818df47e602292bbab8746fd37c0a91935810bd77ee1d8488310a6a1635698f66164eaed5106d527907fa9039cd95a8bf5246ea322fdbf2d891c66b3f9648c833943fe78253c5b40a0d21b730a81869cd60031ad4efb3d62d465669ac8fa60efcc6c526e1ab57a8220d8b4e6a3425677bbd3fe4b7fd1846631c8fc9c921b9e80a860ba044247c4812339ec49afa88adb7af96724d57a6067c6bc62df3afd7dd2910e106a0f18b74dc152d85e8851fd81b25235d275073b74779e0a9e0048110a0807a8a4a47dfa607c1bbb541f64c6d636c53c527608409aedf2014efc03778eb835f93eb4aaecf5bdba76e153e805a6333339244f258d568783450547d2bc5d98c2161034dde1e6417b29f8a163a02493c94571b6ddb53c37157431a8caa0d94326fc93d5c4ea66572df39115ac6ba6601de666d33907c3bda327edfc09ad6d37983036f54b619dac4b8a4f6831bc53ca34308474e2867e89ee88f8b726994c684f7c3088fd8df524c427ab00296393028eb385af85dca0740f91d76c343447898641c0fb3dc023af6234664e486e4306f39719104242db9cd1a542d8750675c9e6a543bfc83d5631a53eb8496f94f6d4631eee4a1183d928a0b6945d1cc1f8c904f6abe01590b446eabb4ef02a421daeb1e68d4e804f67428f456eea5973d6e2375685c200dc8b54a93d1d23b0730ae4b1238761adab1a1a7fcf7970955f7164d4a89c4e51eb1e88261485c15d1843ed7c911a7106394104239f2990aad6fac4dcaf9bd283679b69cc7d542efe225c48606973994fb45a311f2b2a9fa15bdfb04636159e2e8e63373bc88b324c43ab2dbb2564a27e7e88565648cd80743f3dd1beb290b707ae2205d0dbc0b9603fcedd6426eb2251360105db759af1992fc4f7fd7c049c74ad7d101d132eb0b6c0297be82964beaa6b593006163dcacadba787056bbc556b82e3bda844afc46f11ec860b93f43efd2b11cb983007b2ba5f516326d129a3c4a3b4a1dd8759d6a3947dccc750668d647bd27d33874d6a9eaafa8e58b638c5031172912ed8e5076534fed0595c3c0022689337c778681aa1831419052b229018fb7c7ce2de57cb6e2701c39aa71d9379c662ac92c414cdd257104b862145887b66b55ccf87be9e57810dc0012f25a4232e559d7b0b6967a68cda92319f2e1e76357204a7f07f02a5579f12e96a754b1b8505f67c31005dee99dc7d33cb6a429454bff3804efa3130a8d3071730697e7c43d5478a02749b6a3972f5ca07fcb00cb79d2f096c9b376d4f8fd2ee545f4da4486b10380b0f285e13f7b1ac2f2eb0203817a4ca458e6f772e95ebc799e0aedbea0cc236a10bc66dbb7a2bf24c1ce1bce25fe5e3434021164d51e016bc70bf706517b443a4e39e0afb2df41e884ba45d981b44b199c595d8d1b1ee1571d67b07eeae444671b16a1deb0ee5859d1bf43d889a48767fc1c7bfa8677727e3754423f2141d23872b749d66f016ba469733342e0d5d67d1c44f1ffff5c232037fd5d7d2b934a23e7218122e63351696f12670ae72feca983f29dab1718bb5c8f0cbc9904fe1d42161145226bc63cb85a8c7363a0d3c0af1f26d763287591e5e4c708bd568e392b9ef95082b7dafb6b302fcd617bda1c4ee3172bdc681d36"}, 0x742) (async)

02:43:14 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0xec01}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:14 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}]}, 0x78)

02:43:14 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x9000000000000)

02:43:14 executing program 1:
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00')
mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f00000002c0)='./file0/file0\x00', 0x0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
renameat2(r1, &(0x7f0000001680)='./file0/file0\x00', r0, &(0x7f00000016c0)='./file0\x00', 0x0)
r2 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff)
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f0000000380))
r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, &(0x7f00000000c0)='./file0\x00')
mkdirat(r5, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r5, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f00000002c0)='./file0/file0\x00', 0x0)
r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r6, &(0x7f00000000c0)='./file0\x00')
renameat2(r6, &(0x7f0000001680)='./file0/file0\x00', r5, &(0x7f00000016c0)='./file0\x00', 0x0)
sendto$inet(r6, 0x0, 0x0, 0x200088e5, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000100)=@device_b, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES16, @ANYRESOCT, @ANYRESOCT=r3, @ANYBLOB="26e385e191932a0c48e0a90b6dda7a5067adf6289023d612dc45e82d34147a502d31bc917590c1f8cbbfb646360e23435a4749f19607ddac4922dae3a23b5bea66d6e3916d8ef6855bd1bf801286e369507acb20ae520baaeb86bdc99763e10a0ad45c073ddf39bc01f58a8652b4ff2bc7f3d5e1cf172a59dd95a49bc72131745b4dd8e351b7f9a3d4795b53c9895714c34e80312f374b3f0d7b7b", @ANYRES16=r6, @ANYRESOCT=r4, @ANYBLOB="9a1c7c395e121311d620649607950c8acc4a663b64614b230899688753a644a539e9c50841599b511ac5ca9b20894195b0bde320aad423048cda80fe82e29190d6eb46e75b82f9bc695e8c9db838f7efe78e731a4849aa12ef3e00af6cc09c8071a43e2cf2d1ca6b9c886e84903fc49363b84e76f69a95dec5715065d4ff18d996b1a07d5b3bded9a151f223fcccf9cd6127984aefd122c1a0a8b07e262b997bc197bd521311e54b3460d19a519105b53ca1fdb47cc86951a81e9d48a0f53f5b1da4357becfb48004e30ced262276b7bb159730d68e2f7ce1d0c64990abde1b0661c752d35e712c6dc0e7d782f011aedc9c0218c09dc8512c53663780e3f"], 0x34)

02:43:14 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x900, 0x38, 0x4}, [{}]}, 0x78)

[ 1673.107715][T31808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:14 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xa00, 0x38, 0x4}, [{}]}, 0x78)

02:43:14 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x20000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:14 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}]}, 0x78)

[ 1673.152932][T31816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1673.169351][T31812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1673.188524][T31816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:14 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xb00, 0x38, 0x4}, [{}]}, 0x78)

[ 1673.226302][T31816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1673.252532][T31819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:14 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}]}, 0x78)

02:43:14 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xc00, 0x38, 0x4}, [{}]}, 0x78)

02:43:14 executing program 2:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34) (async)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000080)=@data_frame={@qos_ht={{{@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1}, @device_a, @device_b, @random="0f09d760e3e2", {0x4, 0x9}}, {0x1, 0x1, 0x0, 0x0, 0x3}}, {@type11={{0x0, 0x2, 0xc, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x2}, @device_b, @device_b, @random="664a40da633d", {0x5, 0x3}, @device_b}, {0x9, 0x0, 0x1, 0x1, 0xd7}}}, @ver_80211n={0x0, 0x20, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1}}, @random="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"}, 0x742)

02:43:14 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x40000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:14 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}]}, 0x78)

02:43:14 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xd00, 0x38, 0x4}, [{}]}, 0x78)

02:43:14 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x20000000000000)

02:43:14 executing program 1:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[@ANYBLOB="a8000000ffffffffffff080900000001505050505050"], 0x34)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f00000000c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x7}, @device_a, @device_a, @initial, {0x9, 0x431}}, @ver_80211n={0x0, 0x7, 0x3, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, @tdls_setup_req={0xc, 0x0, "", 0x7, @void, @val, @val={0x2d, 0x1a, {0x2, 0x0, 0x0, 0x0, {0x80000001, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x8, 0x3f, 0x8}}, @val={0x65, 0x12, {@random="b2fbc1fa3813", @device_b, @device_b}}}}, 0x51)

[ 1673.634282][T31838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:14 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x1000000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

[ 1673.647918][T31840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1673.651243][T31840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1673.689813][T31842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:14 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xe00, 0x38, 0x4}, [{}]}, 0x78)

02:43:14 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}]}, 0x78)

02:43:14 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xf00, 0x38, 0x4}, [{}]}, 0x78)

02:43:14 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x2000000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:15 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x1800, 0x38, 0x4}, [{}]}, 0x78)

02:43:15 executing program 2:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000080)=@mgmt_frame=@action_no_ack={@wo_ht={{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x7f}, @broadcast, @broadcast, @initial, {0x2, 0x1}}, @vht_group_id={0x15, 0x1, {0x0, "d6e7e27bdf82b6b8e34d940db454f6c2"}}}, 0x32)

02:43:15 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}]}, 0x78)

02:43:15 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x3000000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:15 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x40030000000000)

02:43:15 executing program 1:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[@ANYBLOB="a8000000ffffffffffff080900000001505050505050"], 0x34) (async)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f00000000c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x7}, @device_a, @device_a, @initial, {0x9, 0x431}}, @ver_80211n={0x0, 0x7, 0x3, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, @tdls_setup_req={0xc, 0x0, "", 0x7, @void, @val, @val={0x2d, 0x1a, {0x2, 0x0, 0x0, 0x0, {0x80000001, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x8, 0x3f, 0x8}}, @val={0x65, 0x12, {@random="b2fbc1fa3813", @device_b, @device_b}}}}, 0x51)

02:43:15 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x1a00, 0x38, 0x4}, [{}]}, 0x78)

[ 1674.060903][T31865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1674.071281][T31870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1674.082696][T31872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:15 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x1b00, 0x38, 0x4}, [{}]}, 0x78)

02:43:15 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x4000000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:15 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e}]}, 0x78)

[ 1674.111791][T31872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:15 executing program 1:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[@ANYBLOB="a8000000ffffffffffff080900000001505050505050"], 0x34) (async)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f00000000c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x7}, @device_a, @device_a, @initial, {0x9, 0x431}}, @ver_80211n={0x0, 0x7, 0x3, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, @tdls_setup_req={0xc, 0x0, "", 0x7, @void, @val, @val={0x2d, 0x1a, {0x2, 0x0, 0x0, 0x0, {0x80000001, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x8, 0x3f, 0x8}}, @val={0x65, 0x12, {@random="b2fbc1fa3813", @device_b, @device_b}}}}, 0x51)

02:43:15 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}]}, 0x78)

02:43:15 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x3e00, 0x38, 0x4}, [{}]}, 0x78)

[ 1674.285461][T31980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:15 executing program 2:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000080)=@mgmt_frame=@action_no_ack={@wo_ht={{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x7f}, @broadcast, @broadcast, @initial, {0x2, 0x1}}, @vht_group_id={0x15, 0x1, {0x0, "d6e7e27bdf82b6b8e34d940db454f6c2"}}}, 0x32)

02:43:15 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x5000000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:15 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4b00, 0x38, 0x4}, [{}]}, 0x78)

02:43:15 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}]}, 0x78)

02:43:15 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0xf0ffffffffffff)

02:43:15 executing program 1:
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00')
mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f00000002c0)='./file0/file0\x00', 0x0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
renameat2(r1, &(0x7f0000001680)='./file0/file0\x00', r0, &(0x7f00000016c0)='./file0\x00', 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200088e5, 0x0, 0x0)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00')
mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f00000002c0)='./file0/file0\x00', 0x0)
r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x241)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00')
renameat2(r3, &(0x7f0000001680)='./file0/file0\x00', r2, &(0x7f00000016c0)='./file0\x00', 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200088e5, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'})
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[@ANYBLOB="a8000000ffffffffffff080900000001505050505050"], 0x34)

02:43:15 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x7800, 0x38, 0x4}, [{}]}, 0x78)

02:43:15 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180}]}, 0x78)

02:43:15 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x6000000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

[ 1674.512013][T32096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1674.523726][T32097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1674.568121][T32101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:15 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x7000000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:15 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x7f00, 0x38, 0x4}, [{}]}, 0x78)

02:43:15 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}]}, 0x78)

02:43:16 executing program 2:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000080)=@mgmt_frame=@action_no_ack={@wo_ht={{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x7f}, @broadcast, @broadcast, @initial, {0x2, 0x1}}, @vht_group_id={0x15, 0x1, {0x0, "d6e7e27bdf82b6b8e34d940db454f6c2"}}}, 0x32)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34) (async)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000080)=@mgmt_frame=@action_no_ack={@wo_ht={{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x7f}, @broadcast, @broadcast, @initial, {0x2, 0x1}}, @vht_group_id={0x15, 0x1, {0x0, "d6e7e27bdf82b6b8e34d940db454f6c2"}}}, 0x32) (async)

02:43:16 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x8000000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:16 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}]}, 0x78)

02:43:16 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x9b00, 0x38, 0x4}, [{}]}, 0x78)

02:43:16 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x100000000000000)

02:43:16 executing program 1:
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') (async)
mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async)
renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f00000002c0)='./file0/file0\x00', 0x0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
renameat2(r1, &(0x7f0000001680)='./file0/file0\x00', r0, &(0x7f00000016c0)='./file0\x00', 0x0) (async)
sendto$inet(r1, 0x0, 0x0, 0x200088e5, 0x0, 0x0) (async)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') (async)
mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async)
renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f00000002c0)='./file0/file0\x00', 0x0) (async)
r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x241)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00') (async)
renameat2(r3, &(0x7f0000001680)='./file0/file0\x00', r2, &(0x7f00000016c0)='./file0\x00', 0x0) (async)
sendto$inet(r3, 0x0, 0x0, 0x200088e5, 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'})
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[@ANYBLOB="a8000000ffffffffffff080900000001505050505050"], 0x34)

02:43:16 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xf000, 0x38, 0x4}, [{}]}, 0x78)

02:43:16 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}]}, 0x78)

[ 1674.986679][T32120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1675.005354][T32138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:16 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0xc000000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

[ 1675.055164][T32180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:16 executing program 1:
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00')
mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f00000002c0)='./file0/file0\x00', 0x0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
renameat2(r1, &(0x7f0000001680)='./file0/file0\x00', r0, &(0x7f00000016c0)='./file0\x00', 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200088e5, 0x0, 0x0)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00')
mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f00000002c0)='./file0/file0\x00', 0x0)
r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x241)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00')
renameat2(r3, &(0x7f0000001680)='./file0/file0\x00', r2, &(0x7f00000016c0)='./file0\x00', 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200088e5, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'})
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[@ANYBLOB="a8000000ffffffffffff080900000001505050505050"], 0x34)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') (async)
mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async)
renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f00000002c0)='./file0/file0\x00', 0x0) (async)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') (async)
renameat2(r1, &(0x7f0000001680)='./file0/file0\x00', r0, &(0x7f00000016c0)='./file0\x00', 0x0) (async)
sendto$inet(r1, 0x0, 0x0, 0x200088e5, 0x0, 0x0) (async)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') (async)
mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async)
renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f00000002c0)='./file0/file0\x00', 0x0) (async)
open(&(0x7f0000000140)='.\x00', 0x0, 0x241) (async)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00') (async)
renameat2(r3, &(0x7f0000001680)='./file0/file0\x00', r2, &(0x7f00000016c0)='./file0\x00', 0x0) (async)
sendto$inet(r3, 0x0, 0x0, 0x200088e5, 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) (async)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[@ANYBLOB="a8000000ffffffffffff080900000001505050505050"], 0x34) (async)

02:43:16 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x4}, [{}]}, 0x78)

02:43:16 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}]}, 0x78)

[ 1675.129139][T32138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1675.136017][T32231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1675.210630][T32238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:16 executing program 2:
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000200))
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000000)=ANY=[], 0x34)
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_a, @broadcast, @random="513fe0cdc3bd", {0x9, 0xfe1}}, {0x0, 0x1, 0x0, 0x0, 0x3}}, {@type11={{0x0, 0x2, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x7f93}, @device_a, @broadcast, @from_mac=@device_b, {0x7}, @broadcast}, {0x2, 0x1, 0x2, 0x1, 0xfe}}}, @random="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"}, 0x143)

02:43:16 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x10020000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:16 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x9, 0x4}, [{}]}, 0x78)

02:43:16 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}]}, 0x78)

02:43:16 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x200000000000000)

02:43:16 executing program 1:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[@ANYBLOB="030408000000000000ff080900000401505050505050"], 0x34)

02:43:16 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}]}, 0x78)

[ 1675.574853][T32347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1675.610311][T32351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:16 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xa, 0x4}, [{}]}, 0x78)

02:43:16 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x11000000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

[ 1675.646137][T32353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:16 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xd, 0x4}, [{}]}, 0x78)

[ 1675.695330][T32353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:16 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}]}, 0x78)

02:43:16 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x1d000000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:17 executing program 2:
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000200))
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000000)=ANY=[], 0x34)
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_a, @broadcast, @random="513fe0cdc3bd", {0x9, 0xfe1}}, {0x0, 0x1, 0x0, 0x0, 0x3}}, {@type11={{0x0, 0x2, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x7f93}, @device_a, @broadcast, @from_mac=@device_b, {0x7}, @broadcast}, {0x2, 0x1, 0x2, 0x1, 0xfe}}}, @random="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"}, 0x143)
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000200)) (async)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000000)=ANY=[], 0x34) (async)
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_a, @broadcast, @random="513fe0cdc3bd", {0x9, 0xfe1}}, {0x0, 0x1, 0x0, 0x0, 0x3}}, {@type11={{0x0, 0x2, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x7f93}, @device_a, @broadcast, @from_mac=@device_b, {0x7}, @broadcast}, {0x2, 0x1, 0x2, 0x1, 0xfe}}}, @random="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"}, 0x143) (async)

02:43:17 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x50, 0x4}, [{}]}, 0x78)

02:43:17 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}]}, 0x78)

02:43:17 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x21020000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:17 executing program 1:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[@ANYBLOB="030408000000000000ff080900000401505050505050"], 0x34)

02:43:17 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x300000000000000)

02:43:17 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x30010000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

[ 1676.097181][T32373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1676.100526][T32378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1676.132950][T32380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:17 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x78, 0x4}, [{}]}, 0x78)

02:43:17 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}]}, 0x78)

[ 1676.184184][T32381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:17 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x32010000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

[ 1676.246134][T32381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1676.247616][T32388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:17 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x9b, 0x4}, [{}]}, 0x78)

02:43:17 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a00}]}, 0x78)

02:43:17 executing program 2:
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000200))
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000000)=ANY=[], 0x34)
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_a, @broadcast, @random="513fe0cdc3bd", {0x9, 0xfe1}}, {0x0, 0x1, 0x0, 0x0, 0x3}}, {@type11={{0x0, 0x2, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x7f93}, @device_a, @broadcast, @from_mac=@device_b, {0x7}, @broadcast}, {0x2, 0x1, 0x2, 0x1, 0xfe}}}, @random="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"}, 0x143)
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000200)) (async)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000000)=ANY=[], 0x34) (async)
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_a, @broadcast, @random="513fe0cdc3bd", {0x9, 0xfe1}}, {0x0, 0x1, 0x0, 0x0, 0x3}}, {@type11={{0x0, 0x2, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x7f93}, @device_a, @broadcast, @from_mac=@device_b, {0x7}, @broadcast}, {0x2, 0x1, 0x2, 0x1, 0xfe}}}, @random="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"}, 0x143) (async)

02:43:17 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x40000000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:17 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x10ff, 0x4}, [{}]}, 0x78)

02:43:17 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x400000000000000)

02:43:17 executing program 1:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[@ANYBLOB="030408000000000000ff080900000401505050505050"], 0x34)

02:43:17 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b00}]}, 0x78)

[ 1676.645144][T32404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1676.666120][T32406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:17 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x45000000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

[ 1676.692502][T32409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1676.693840][T32409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1676.718683][T32411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1676.720139][T32410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:17 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xfeff, 0x4}, [{}]}, 0x78)

02:43:17 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x57020000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:17 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e00}]}, 0x78)

02:43:18 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x5c030000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:18 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x7}, [{}]}, 0x78)

02:43:18 executing program 2:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)
syz_80211_inject_frame(&(0x7f00000000c0)=@broadcast, &(0x7f0000000100)=@ctrl_frame=@rts={{}, {0x21}, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000080)=@mgmt_frame=@deauth={@with_ht={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x7f}, @broadcast, @device_b, @random="e019da9cd7da", {0x6, 0x2}}, @ver_80211n={0x0, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x225, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000180)=@ctrl_frame=@cts={{}, {0x7f}, @broadcast}, 0xa)

02:43:18 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}]}, 0x78)

02:43:18 executing program 1:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[@ANYBLOB="a8000000ffffffffffff080900000001505050505050"], 0x34)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f00000000c0)=@mgmt_frame=@beacon={@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x5}, @broadcast, @device_a, @initial, {0x7, 0xff}}, 0x8, @random=0xc368, 0x2000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0x6, 0x1, 0x8, 0x2cb}}, @void, @val={0x5, 0xb3, {0x1, 0xe4, 0x6, "803b3c0f6caf8e79333934d43a9a71401a42846982505167b81d84f6ef5cff31d51e71c0086af59b9f13ca53cbddc35dff491d82ad13e134545f8619986fd14bb5520e5d0d7793c833fc6979476ab8f568b1f4659107bc3b504f1d6d4801f329c6c4957393ab41966c9fe17652b9a9561922c5c85da2a4c8a654679957fb4c7bebc09846cdee060689f8750f591a3ec05e6e4cb487c1651361b7a358db85723e5511f60b9d27c79a504e4bb6df741f67"}}, @val={0x25, 0x3, {0x1, 0xa, 0xc0}}, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @void, @void, @void, @val={0x76, 0x6, {0x7f, 0x1, 0x3d, 0xff00}}, [{0xdd, 0xd0, "d585980599151f85c238aa8257748052c81811deb0ac5da3b16965a6359d2b331ebed2974f6cdf40323fb78ca4a622d9c9b91279e739e341704b4fcab12ad6ee231595db03cc3080fda156af9d3c348d7dcd521d2518a76c55e195b0e8e324609c93ce38c9fb925decb51a65500fecbd3110688edc098470d4bd6464ae410e485aafc92a40619231ff916a066dd3bad8e73387459c40c1adae3cf5927a369f296f95f22e3d16a97099dff1083c19e82e8b6296582b44a250c7c56ed5cee475791a96b30766bd9e5be950e8b48d5d5285"}, {0xdd, 0x4a, "485f155d6d4c32ffbea5ee29573d00ef2b542ea263f069caea5f18826c862538b062c7332f24cc0529ec035b9e68771953ddef0e49c2a4f97164ac1bc02ce817f7cdc7fc1cb6b3cb8ba2"}, {0xdd, 0x3f, "dee1eb493c9ed84b9c6708a49fa8630409991b94e376e857acf5cf661e7848bb55229b113777769492ee08f06ef2b0750bce6f54a3825f95bf5e7f5007c199"}]}, 0x258)

02:43:18 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x500000000000000)

02:43:18 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x82010000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:18 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x8}, [{}]}, 0x78)

[ 1677.082294][T32429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1677.116718][T32431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:18 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00}]}, 0x78)

[ 1677.151562][T32459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:18 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x88000000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:18 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x9}, [{}]}, 0x78)

[ 1677.202186][T32479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:18 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b00}]}, 0x78)

02:43:18 executing program 1:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[@ANYBLOB="a8000000ffffffffffff080900000001505050505050"], 0x34) (async)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f00000000c0)=@mgmt_frame=@beacon={@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x5}, @broadcast, @device_a, @initial, {0x7, 0xff}}, 0x8, @random=0xc368, 0x2000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0x6, 0x1, 0x8, 0x2cb}}, @void, @val={0x5, 0xb3, {0x1, 0xe4, 0x6, "803b3c0f6caf8e79333934d43a9a71401a42846982505167b81d84f6ef5cff31d51e71c0086af59b9f13ca53cbddc35dff491d82ad13e134545f8619986fd14bb5520e5d0d7793c833fc6979476ab8f568b1f4659107bc3b504f1d6d4801f329c6c4957393ab41966c9fe17652b9a9561922c5c85da2a4c8a654679957fb4c7bebc09846cdee060689f8750f591a3ec05e6e4cb487c1651361b7a358db85723e5511f60b9d27c79a504e4bb6df741f67"}}, @val={0x25, 0x3, {0x1, 0xa, 0xc0}}, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @void, @void, @void, @val={0x76, 0x6, {0x7f, 0x1, 0x3d, 0xff00}}, [{0xdd, 0xd0, "d585980599151f85c238aa8257748052c81811deb0ac5da3b16965a6359d2b331ebed2974f6cdf40323fb78ca4a622d9c9b91279e739e341704b4fcab12ad6ee231595db03cc3080fda156af9d3c348d7dcd521d2518a76c55e195b0e8e324609c93ce38c9fb925decb51a65500fecbd3110688edc098470d4bd6464ae410e485aafc92a40619231ff916a066dd3bad8e73387459c40c1adae3cf5927a369f296f95f22e3d16a97099dff1083c19e82e8b6296582b44a250c7c56ed5cee475791a96b30766bd9e5be950e8b48d5d5285"}, {0xdd, 0x4a, "485f155d6d4c32ffbea5ee29573d00ef2b542ea263f069caea5f18826c862538b062c7332f24cc0529ec035b9e68771953ddef0e49c2a4f97164ac1bc02ce817f7cdc7fc1cb6b3cb8ba2"}, {0xdd, 0x3f, "dee1eb493c9ed84b9c6708a49fa8630409991b94e376e857acf5cf661e7848bb55229b113777769492ee08f06ef2b0750bce6f54a3825f95bf5e7f5007c199"}]}, 0x258)

[ 1677.262308][T32479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:18 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x92030000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

[ 1677.324629][T32459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1677.393717][T32551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:18 executing program 2:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34)
syz_80211_inject_frame(&(0x7f00000000c0)=@broadcast, &(0x7f0000000100)=@ctrl_frame=@rts={{}, {0x21}, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000080)=@mgmt_frame=@deauth={@with_ht={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x7f}, @broadcast, @device_b, @random="e019da9cd7da", {0x6, 0x2}}, @ver_80211n={0x0, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x225, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000180)=@ctrl_frame=@cts={{}, {0x7f}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34) (async)
syz_80211_inject_frame(&(0x7f00000000c0)=@broadcast, &(0x7f0000000100)=@ctrl_frame=@rts={{}, {0x21}, @device_b}, 0x10) (async)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000080)=@mgmt_frame=@deauth={@with_ht={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x7f}, @broadcast, @device_b, @random="e019da9cd7da", {0x6, 0x2}}, @ver_80211n={0x0, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x225, @void}, 0x1e) (async)
syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000180)=@ctrl_frame=@cts={{}, {0x7f}, @broadcast}, 0xa) (async)

02:43:18 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0xa}, [{}]}, 0x78)

02:43:18 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000}]}, 0x78)

02:43:18 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0x96010000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:18 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x600000000000000)

02:43:18 executing program 1:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[@ANYBLOB="a8000000ffffffffffff080900000001505050505050"], 0x34)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f00000000c0)=@mgmt_frame=@beacon={@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x5}, @broadcast, @device_a, @initial, {0x7, 0xff}}, 0x8, @random=0xc368, 0x2000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0x6, 0x1, 0x8, 0x2cb}}, @void, @val={0x5, 0xb3, {0x1, 0xe4, 0x6, "803b3c0f6caf8e79333934d43a9a71401a42846982505167b81d84f6ef5cff31d51e71c0086af59b9f13ca53cbddc35dff491d82ad13e134545f8619986fd14bb5520e5d0d7793c833fc6979476ab8f568b1f4659107bc3b504f1d6d4801f329c6c4957393ab41966c9fe17652b9a9561922c5c85da2a4c8a654679957fb4c7bebc09846cdee060689f8750f591a3ec05e6e4cb487c1651361b7a358db85723e5511f60b9d27c79a504e4bb6df741f67"}}, @val={0x25, 0x3, {0x1, 0xa, 0xc0}}, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @void, @void, @void, @val={0x76, 0x6, {0x7f, 0x1, 0x3d, 0xff00}}, [{0xdd, 0xd0, "d585980599151f85c238aa8257748052c81811deb0ac5da3b16965a6359d2b331ebed2974f6cdf40323fb78ca4a622d9c9b91279e739e341704b4fcab12ad6ee231595db03cc3080fda156af9d3c348d7dcd521d2518a76c55e195b0e8e324609c93ce38c9fb925decb51a65500fecbd3110688edc098470d4bd6464ae410e485aafc92a40619231ff916a066dd3bad8e73387459c40c1adae3cf5927a369f296f95f22e3d16a97099dff1083c19e82e8b6296582b44a250c7c56ed5cee475791a96b30766bd9e5be950e8b48d5d5285"}, {0xdd, 0x4a, "485f155d6d4c32ffbea5ee29573d00ef2b542ea263f069caea5f18826c862538b062c7332f24cc0529ec035b9e68771953ddef0e49c2a4f97164ac1bc02ce817f7cdc7fc1cb6b3cb8ba2"}, {0xdd, 0x3f, "dee1eb493c9ed84b9c6708a49fa8630409991b94e376e857acf5cf661e7848bb55229b113777769492ee08f06ef2b0750bce6f54a3825f95bf5e7f5007c199"}]}, 0x258)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[@ANYBLOB="a8000000ffffffffffff080900000001505050505050"], 0x34) (async)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f00000000c0)=@mgmt_frame=@beacon={@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x5}, @broadcast, @device_a, @initial, {0x7, 0xff}}, 0x8, @random=0xc368, 0x2000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0x6, 0x1, 0x8, 0x2cb}}, @void, @val={0x5, 0xb3, {0x1, 0xe4, 0x6, "803b3c0f6caf8e79333934d43a9a71401a42846982505167b81d84f6ef5cff31d51e71c0086af59b9f13ca53cbddc35dff491d82ad13e134545f8619986fd14bb5520e5d0d7793c833fc6979476ab8f568b1f4659107bc3b504f1d6d4801f329c6c4957393ab41966c9fe17652b9a9561922c5c85da2a4c8a654679957fb4c7bebc09846cdee060689f8750f591a3ec05e6e4cb487c1651361b7a358db85723e5511f60b9d27c79a504e4bb6df741f67"}}, @val={0x25, 0x3, {0x1, 0xa, 0xc0}}, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @void, @void, @void, @val={0x76, 0x6, {0x7f, 0x1, 0x3d, 0xff00}}, [{0xdd, 0xd0, "d585980599151f85c238aa8257748052c81811deb0ac5da3b16965a6359d2b331ebed2974f6cdf40323fb78ca4a622d9c9b91279e739e341704b4fcab12ad6ee231595db03cc3080fda156af9d3c348d7dcd521d2518a76c55e195b0e8e324609c93ce38c9fb925decb51a65500fecbd3110688edc098470d4bd6464ae410e485aafc92a40619231ff916a066dd3bad8e73387459c40c1adae3cf5927a369f296f95f22e3d16a97099dff1083c19e82e8b6296582b44a250c7c56ed5cee475791a96b30766bd9e5be950e8b48d5d5285"}, {0xdd, 0x4a, "485f155d6d4c32ffbea5ee29573d00ef2b542ea263f069caea5f18826c862538b062c7332f24cc0529ec035b9e68771953ddef0e49c2a4f97164ac1bc02ce817f7cdc7fc1cb6b3cb8ba2"}, {0xdd, 0x3f, "dee1eb493c9ed84b9c6708a49fa8630409991b94e376e857acf5cf661e7848bb55229b113777769492ee08f06ef2b0750bce6f54a3825f95bf5e7f5007c199"}]}, 0x258) (async)

[ 1677.747373][T32663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1677.748908][T32664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1677.769318][T32663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1677.786811][T32667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:18 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0xcb030000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:18 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0xc}, [{}]}, 0x78)

02:43:18 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}]}, 0x78)

[ 1677.797849][T32663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1677.836634][T32667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1677.879491][T32667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:19 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0xd2030000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:19 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0xd}, [{}]}, 0x78)

[ 1677.927459][T32757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:19 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000}]}, 0x78)

[ 1677.975809][T32667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1678.031424][T32757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1678.040589][  T311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1678.073049][  T312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:19 executing program 2:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=ANY=[], 0x34) (async)
syz_80211_inject_frame(&(0x7f00000000c0)=@broadcast, &(0x7f0000000100)=@ctrl_frame=@rts={{}, {0x21}, @device_b}, 0x10) (async)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000080)=@mgmt_frame=@deauth={@with_ht={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x7f}, @broadcast, @device_b, @random="e019da9cd7da", {0x6, 0x2}}, @ver_80211n={0x0, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x225, @void}, 0x1e) (async, rerun: 64)
syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000180)=@ctrl_frame=@cts={{}, {0x7f}, @broadcast}, 0xa) (rerun: 64)

02:43:19 executing program 1:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f00000000c0)=ANY=[@ANYBLOB="a8000000ffffffffffff080900000001505050505050", @ANYBLOB="21fd50891a624a7b70ac0ac14f41c1dca2d170f9d2a523849e113042729f0e927832763d2295e69086aa02763e1e6f2bf59094bc2f09f5a917b63cfc332c08db64fa8335fa52fabfb64c39093042aef221d629046cdb0ef0a93bc08f783b8f9bdf5e11aa0b8645af50e940afd9d83d46b7fc4a36661ce765c14159d9e4af87c589b577ecba41041a94c1a56fd256d77d7c30d6d72a62847e7082e59e0b6a581170e6", @ANYRESDEC=0x0], 0x34)

02:43:19 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0xe}, [{}]}, 0x78)

02:43:19 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0xdd010000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:19 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}]}, 0x78)

02:43:19 executing program 0:
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x700000000000000)

02:43:19 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0xf}, [{}]}, 0x78)

02:43:19 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000}]}, 0x78)

[ 1678.447826][  T327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1678.468536][  T328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:19 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0xea030000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

[ 1678.528273][  T335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1678.571071][  T337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1678.591681][  T337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1678.601814][  T338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1678.605324][  T337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1678.612380][  T337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1678.620009][  T337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:19 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x0, 0x0, 0xfffc}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='X', 0x1}])
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x130, 0x5002004a, 0x0, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@devgroup={{0x38}, {0xec010000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'veth1_to_bond\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)

02:43:19 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x10}, [{}]}, 0x78)

[ 1678.627961][  T337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
02:43:19 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}]}, 0x78)

[ 1678.738895][  T338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1678.743105][  T337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1678.797134][  T338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1678.837658][  T337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1678.839445][  T338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1678.874494][  T338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1678.888740][  T338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1679.768238][T15275] device hsr_slave_0 left promiscuous mode
[ 1679.785356][T15275] device hsr_slave_1 left promiscuous mode
[ 1679.816168][T15275] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1679.824519][T15275] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1679.858026][T15275] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1679.901890][T15275] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1679.918465][T15275] device bridge_slave_1 left promiscuous mode
[ 1679.936570][T15275] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1679.946513][T15275] device bridge_slave_0 left promiscuous mode
[ 1679.952779][T15275] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1679.987496][T15275] device veth1_macvtap left promiscuous mode
[ 1679.995289][T15275] device veth0_macvtap left promiscuous mode
[ 1680.001608][T15275] device veth1_vlan left promiscuous mode
[ 1680.008379][T15275] device veth0_vlan left promiscuous mode
[ 1680.342687][T15275] team0 (unregistering): Port device team_slave_1 removed
[ 1680.371189][T15275] team0 (unregistering): Port device team_slave_0 removed
[ 1680.391985][T15275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1680.414440][T15275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1680.546457][T15275] bond0 (unregistering): Released all slaves
[ 1684.465326][ T6013] Bluetooth: hci3: Opcode 0x c03 failed: -110
[ 1687.665310][ T3630] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1687.676051][ T3630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1687.684834][ T3630] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1687.692997][ T3630] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1687.700659][ T3630] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1687.708270][ T3630] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1687.850776][  T358] chnl_net:caif_netlink_parms(): no params data found
[ 1687.944696][  T358] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1687.960358][  T358] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1687.971532][  T358] device bridge_slave_0 entered promiscuous mode
[ 1687.987838][  T358] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1688.004528][  T358] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1688.012975][  T358] device bridge_slave_1 entered promiscuous mode
[ 1688.065541][  T358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1688.085604][  T358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1688.135976][  T358] team0: Port device team_slave_0 added
[ 1688.144649][  T358] team0: Port device team_slave_1 added
[ 1688.181111][  T358] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1688.188375][  T358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1688.215114][  T358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1688.228893][  T358] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1688.236515][  T358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1688.264363][  T358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1688.317789][  T358] device hsr_slave_0 entered promiscuous mode
[ 1688.324769][  T358] device hsr_slave_1 entered promiscuous mode
[ 1688.339801][  T358] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1688.347989][  T358] Cannot create hsr debugfs directory
[ 1688.463212][  T358] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1688.470389][  T358] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1688.477819][  T358] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1688.484924][  T358] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1688.557445][  T358] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1688.573013][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1688.583407][ T3680] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1688.592326][ T3680] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1688.601678][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 1688.621480][  T358] 8021q: adding VLAN 0 to HW filter on device team0
[ 1688.634317][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1688.643812][ T3680] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1688.650967][ T3680] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1688.673251][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1688.682198][ T3680] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1688.689888][ T3680] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1688.709678][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1688.719034][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1688.736258][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1688.744405][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1688.753977][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1688.765740][  T358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1688.791758][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1688.799909][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1688.814602][  T358] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1688.842038][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1688.852531][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1688.888609][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1688.897996][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1688.908046][  T358] device veth0_vlan entered promiscuous mode
[ 1688.918386][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1688.926451][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1688.939094][  T358] device veth1_vlan entered promiscuous mode
[ 1688.966821][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1688.976561][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1688.984927][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1688.995663][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1689.006941][  T358] device veth0_macvtap entered promiscuous mode
[ 1689.023310][  T358] device veth1_macvtap entered promiscuous mode
[ 1689.040969][  T358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1689.053136][  T358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1689.063412][  T358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1689.074309][  T358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1689.084483][  T358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1689.095519][  T358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1689.106098][  T358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1689.117545][  T358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1689.129332][  T358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1689.140167][  T358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1689.152266][  T358] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1689.163049][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1689.172252][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1689.181485][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1689.190605][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1689.201854][  T358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1689.213717][  T358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1689.225450][  T358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1689.237939][  T358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1689.248387][  T358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1689.259348][  T358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1689.270592][  T358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1689.281845][  T358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1689.292132][  T358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1689.303294][  T358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1689.316286][  T358] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1689.326871][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1689.336708][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1689.446440][ T3692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1689.466877][ T3692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1689.486478][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1689.495627][T15272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1689.512275][T15272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1689.527365][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1689.597280][  T365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1689.601715][  T367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1689.628085][  T367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1689.640858][  T367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1689.652072][  T368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1689.652534][  T367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1689.674520][  T367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1689.689595][  T367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1689.712957][  T368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1689.723710][  T367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1689.735330][ T1135] Bluetooth: hci3: command 0x0409 tx timeout
[ 1689.751358][  T368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1689.770013][  T367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1689.790698][  T368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1689.810931][  T367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1689.832721][  T368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1690.808943][T15276] device hsr_slave_0 left promiscuous mode
[ 1690.833381][T15276] device hsr_slave_1 left promiscuous mode
[ 1690.840154][T15276] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1690.872472][T15276] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1690.882594][T15276] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1690.890481][T15276] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1690.900614][T15276] device bridge_slave_1 left promiscuous mode
[ 1690.907344][T15276] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1690.916958][T15276] device bridge_slave_0 left promiscuous mode
[ 1690.923279][T15276] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1690.949333][T15276] device veth1_macvtap left promiscuous mode
[ 1690.957521][T15276] device veth0_macvtap left promiscuous mode
[ 1690.964860][T15276] device veth1_vlan left promiscuous mode
[ 1690.977535][T15276] device veth0_vlan left promiscuous mode
[ 1691.381805][T15276] team0 (unregistering): Port device team_slave_1 removed
[ 1691.405728][T15276] team0 (unregistering): Port device team_slave_0 removed
[ 1691.427478][T15276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1691.454135][T15276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1691.621905][T15276] bond0 (unregistering): Released all slaves
[ 1695.185294][ T6013] Bluetooth: hci3: Opcode 0x c03 failed: -110
[ 1700.215335][ T6013] Bluetooth: hci3: Opcode 0x c03 failed: -110
[ 1705.175439][ T6013] Bluetooth: hci3: Opcode 0x c03 failed: -110
[ 1710.135379][ T6013] Bluetooth: hci3: Opcode 0x c03 failed: -110
[ 1713.020793][ T3630] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1713.029934][ T3630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1713.037970][ T3630] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1713.051193][ T3630] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1713.059162][ T3630] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1713.066656][ T3630] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1713.258684][  T375] chnl_net:caif_netlink_parms(): no params data found
[ 1713.343788][  T375] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1713.359825][  T375] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1713.371220][  T375] device bridge_slave_0 entered promiscuous mode
[ 1713.386957][  T375] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1713.394189][  T375] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1713.410659][  T375] device bridge_slave_1 entered promiscuous mode
[ 1713.439281][  T375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1713.450999][  T375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1713.482621][  T375] team0: Port device team_slave_0 added
[ 1713.492421][  T375] team0: Port device team_slave_1 added
[ 1713.524934][  T375] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1713.534746][  T375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1713.570785][  T375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1713.598795][  T375] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1713.612882][  T375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1713.647378][  T375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1713.711658][  T375] device hsr_slave_0 entered promiscuous mode
[ 1713.724259][  T375] device hsr_slave_1 entered promiscuous mode
[ 1713.734150][  T375] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1713.750192][  T375] Cannot create hsr debugfs directory
[ 1713.917803][  T375] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1713.924925][  T375] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1713.932373][  T375] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1713.939514][  T375] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1714.034943][  T375] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1714.050038][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1714.059395][ T1135] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1714.067793][ T1135] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1714.077172][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 1714.093630][  T375] 8021q: adding VLAN 0 to HW filter on device team0
[ 1714.108168][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1714.117294][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1714.124566][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1714.150793][ T3210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1714.159957][ T3210] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1714.167114][ T3210] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1714.190218][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1714.201305][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1714.211286][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1714.225497][  T375] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1714.246994][  T375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1714.256039][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1714.264174][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1714.299037][ T3210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1714.307359][ T3210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1714.318678][  T375] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1714.339583][ T3210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1714.349356][ T3210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1714.380440][ T3210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1714.399039][ T3210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1714.413609][  T375] device veth0_vlan entered promiscuous mode
[ 1714.422717][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1714.431281][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1714.444759][  T375] device veth1_vlan entered promiscuous mode
[ 1714.471776][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1714.481076][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1714.490490][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1714.500098][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1714.511552][  T375] device veth0_macvtap entered promiscuous mode
[ 1714.525598][  T375] device veth1_macvtap entered promiscuous mode
[ 1714.545276][  T375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1714.557256][  T375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1714.567865][  T375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1714.579128][  T375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1714.589452][  T375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1714.600235][  T375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1714.610740][  T375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1714.622808][  T375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1714.633308][  T375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1714.644516][  T375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1714.657122][  T375] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1714.666403][ T3210] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1714.674718][ T3210] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1714.685505][ T3210] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1714.694626][ T3210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1714.707574][  T375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1714.725834][  T375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1714.744947][  T375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1714.764351][  T375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1714.775407][  T375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1714.795014][  T375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1714.804860][  T375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1714.819404][  T375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1714.829940][  T375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1714.848729][  T375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1714.869069][  T375] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1714.885224][T32740] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1714.894741][T32740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1714.997879][T15276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1715.012828][T15276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1715.040834][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1715.051013][T15272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1715.068428][T15272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1715.084872][ T3210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1715.111966][ T3210] Bluetooth: hci3: command 0x0409 tx timeout
[ 1715.167747][  T384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1715.167925][  T381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1715.198067][  T383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1715.209521][  T383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1715.216994][  T384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1715.231251][  T383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1715.242811][  T383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1715.256302][  T383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1715.269396][  T384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1715.280114][  T383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1715.292302][  T384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1715.303102][  T383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1715.316142][  T384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1715.326237][  T383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1715.342215][  T384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1715.353345][  T383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1715.374736][  T384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1716.258515][ T3692] device hsr_slave_0 left promiscuous mode
[ 1716.292410][ T3692] device hsr_slave_1 left promiscuous mode
[ 1716.315628][ T3692] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1716.323090][ T3692] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1716.366002][ T3692] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1716.373460][ T3692] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1716.397551][ T3692] device bridge_slave_1 left promiscuous mode
[ 1716.403888][ T3692] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1716.414413][ T3692] device bridge_slave_0 left promiscuous mode
[ 1716.430626][ T3692] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1716.452819][ T3692] device veth1_macvtap left promiscuous mode
[ 1716.470677][ T3692] device veth0_macvtap left promiscuous mode
[ 1716.480565][ T3692] device veth1_vlan left promiscuous mode
[ 1716.491945][ T3692] device veth0_vlan left promiscuous mode
[ 1716.841469][ T3692] team0 (unregistering): Port device team_slave_1 removed
[ 1716.874923][ T3692] team0 (unregistering): Port device team_slave_0 removed
[ 1716.894097][ T3692] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1716.922916][ T3692] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1717.058336][ T3692] bond0 (unregistering): Released all slaves
[ 1718.715430][ T6013] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1718.727422][ T6013] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1718.751638][ T6013] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1718.759765][ T6013] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1718.771954][ T6013] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1718.779429][ T6013] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1718.913209][  T387] chnl_net:caif_netlink_parms(): no params data found
[ 1719.047010][  T387] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1719.054138][  T387] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1719.077816][  T387] device bridge_slave_0 entered promiscuous mode
[ 1719.106786][  T387] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1719.135131][  T387] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1719.153449][  T387] device bridge_slave_1 entered promiscuous mode
[ 1719.235871][  T387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1719.278470][  T387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1719.343752][  T387] team0: Port device team_slave_0 added
[ 1719.367987][  T387] team0: Port device team_slave_1 added
[ 1719.412855][  T387] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1719.433219][  T387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1719.459701][  T387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1719.486880][  T387] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1719.493848][  T387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1719.555070][  T387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1719.620747][  T387] device hsr_slave_0 entered promiscuous mode
[ 1719.645958][  T387] device hsr_slave_1 entered promiscuous mode
[ 1719.654575][  T387] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1719.662692][  T387] Cannot create hsr debugfs directory
[ 1719.759583][  T387] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1719.766753][  T387] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1719.774138][  T387] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1719.781321][  T387] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1719.843232][  T387] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1719.861708][T32740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1719.871995][T32740] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1719.880470][T32740] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1719.889653][T32740] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 1719.906495][  T387] 8021q: adding VLAN 0 to HW filter on device team0
[ 1719.920288][T32740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1719.931261][T32740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1719.941794][T32740] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1719.948942][T32740] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1719.970263][ T3210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1719.980050][ T3210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1719.989118][ T3210] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1719.996281][ T3210] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1720.005347][ T3210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1720.015578][ T3210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1720.038664][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1720.049853][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1720.068798][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1720.078555][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1720.087706][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1720.096709][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1720.109631][  T387] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1720.124370][  T387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1720.134053][T32740] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1720.143121][T32740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1720.152709][T32740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1720.185821][T32740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1720.193437][T32740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1720.218505][  T387] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1720.265749][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1720.274603][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1720.306120][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1720.314559][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1720.325595][  T387] device veth0_vlan entered promiscuous mode
[ 1720.337115][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1720.346229][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1720.360375][  T387] device veth1_vlan entered promiscuous mode
[ 1720.394823][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1720.404833][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1720.413890][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1720.423331][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1720.435456][  T387] device veth0_macvtap entered promiscuous mode
[ 1720.448617][  T387] device veth1_macvtap entered promiscuous mode
[ 1720.469287][  T387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1720.480385][  T387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1720.492110][  T387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1720.502953][  T387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1720.513334][  T387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1720.524301][  T387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1720.534544][  T387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1720.545523][  T387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1720.558145][  T387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1720.568971][  T387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1720.580775][  T387] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1720.595872][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1720.605537][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1720.613822][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1720.623271][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1720.636403][  T387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1720.649556][  T387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1720.660989][  T387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1720.676897][  T387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1720.687237][  T387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1720.698038][  T387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1720.708382][  T387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1720.719632][  T387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1720.729890][  T387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1720.740719][  T387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1720.752810][  T387] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1720.765190][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1720.774139][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1720.856231][ T3681] Bluetooth: hci3: command 0x0409 tx timeout
[ 1720.873758][ T3692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1720.882693][ T3692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1720.894819][ T3210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1720.933757][ T3692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1720.953358][ T3692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1720.969469][ T3210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1721.037166][  T395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1721.047839][  T396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1721.057829][  T394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1721.071062][  T393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1721.084952][  T396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1721.107354][  T395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1721.118911][  T396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1721.131193][  T395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1721.144612][  T396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1721.156696][  T395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1722.021744][ T3692] device hsr_slave_0 left promiscuous mode
[ 1722.035959][ T3692] device hsr_slave_1 left promiscuous mode
[ 1722.046443][ T3692] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1722.074545][ T3692] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1722.090530][ T3692] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1722.105081][ T3692] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1722.124933][ T3692] device bridge_slave_1 left promiscuous mode
[ 1722.138936][ T3692] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1722.164873][ T3692] device bridge_slave_0 left promiscuous mode
[ 1722.181592][ T3692] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1722.222573][ T3692] device veth1_macvtap left promiscuous mode
[ 1722.234220][ T3692] device veth0_macvtap left promiscuous mode
[ 1722.248559][ T3692] device veth1_vlan left promiscuous mode
[ 1722.254421][ T3692] device veth0_vlan left promiscuous mode
[ 1722.576939][ T3692] team0 (unregistering): Port device team_slave_1 removed
[ 1722.603377][ T3692] team0 (unregistering): Port device team_slave_0 removed
[ 1722.633460][ T3692] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1722.660478][ T3692] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1722.824148][ T3692] bond0 (unregistering): Released all slaves
[ 1726.615443][ T6013] Bluetooth: hci3: Opcode 0x c03 failed: -110
[ 1729.986216][ T1228] ieee802154 phy0 wpan0: encryption failed: -22
[ 1729.992555][ T1228] ieee802154 phy1 wpan1: encryption failed: -22
[ 1731.575698][ T6013] Bluetooth: hci3: Opcode 0x c03 failed: -110
[ 1734.547547][ T3650] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1734.559889][ T3650] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1734.569329][ T3650] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1734.577723][ T3650] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1734.587700][ T3650] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1734.595039][ T3650] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1734.776667][  T402] chnl_net:caif_netlink_parms(): no params data found
[ 1734.868272][  T402] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1734.875631][  T402] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1734.883909][  T402] device bridge_slave_0 entered promiscuous mode
[ 1734.894425][  T402] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1734.903025][  T402] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1734.911651][  T402] device bridge_slave_1 entered promiscuous mode
[ 1734.940483][  T402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1734.952859][  T402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1734.986552][  T402] team0: Port device team_slave_0 added
[ 1734.995773][  T402] team0: Port device team_slave_1 added
[ 1735.020139][  T402] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1735.028095][  T402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1735.054740][  T402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1735.067950][  T402] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1735.074907][  T402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1735.102125][  T402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1735.138546][  T402] device hsr_slave_0 entered promiscuous mode
[ 1735.145852][  T402] device hsr_slave_1 entered promiscuous mode
[ 1735.152501][  T402] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1735.160642][  T402] Cannot create hsr debugfs directory
[ 1735.292375][  T402] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1735.299557][  T402] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1735.306999][  T402] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1735.314188][  T402] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1735.376832][  T402] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1735.394295][ T3210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1735.404009][ T3210] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1735.412384][ T3210] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1735.421847][ T3210] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 1735.438567][  T402] 8021q: adding VLAN 0 to HW filter on device team0
[ 1735.452149][ T3210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1735.464303][ T3210] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1735.471483][ T3210] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1735.497339][ T3210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1735.507788][ T3210] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1735.514890][ T3210] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1735.525610][ T3210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1735.546180][ T3210] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1735.554450][ T3210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1735.563812][ T3210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1735.572624][ T3210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1735.583284][  T402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1735.610249][ T3210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1735.618428][ T3210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1735.632197][  T402] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1735.656439][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1735.679201][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1735.688396][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1735.697004][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1735.707727][  T402] device veth0_vlan entered promiscuous mode
[ 1735.724186][  T402] device veth1_vlan entered promiscuous mode
[ 1735.747402][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1735.756486][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1735.772489][  T402] device veth0_macvtap entered promiscuous mode
[ 1735.781516][T32740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1735.793816][T32740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1735.805525][  T402] device veth1_macvtap entered promiscuous mode
[ 1735.815739][T32740] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1735.824226][T32740] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1735.847420][  T402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1735.861168][  T402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1735.871491][  T402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1735.882393][  T402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1735.893290][  T402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1735.904378][  T402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1735.915823][  T402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1735.926849][  T402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1735.937037][  T402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 1735.948157][  T402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1735.959967][  T402] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1735.971874][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1735.981861][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1735.993421][  T402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1736.006587][  T402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1736.017713][  T402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1736.028690][  T402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1736.039058][  T402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1736.050378][  T402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1736.060608][  T402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1736.071434][  T402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1736.082437][  T402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 1736.093247][  T402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1736.104848][  T402] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1736.115395][T32740] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1736.124920][T32740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1736.220858][ T3692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1736.235391][ T3692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1736.257627][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1736.274857][ T3692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1736.284482][ T3692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1736.300407][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1736.364143][  T410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1736.376802][  T411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1736.387265][  T409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1736.399546][  T408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1736.420529][  T411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1736.434020][  T410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1736.447956][  T410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1736.459626][  T411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1736.473823][  T410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1736.484269][  T411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1736.499108][  T411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1736.523594][  T410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1736.559330][  T410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1736.595670][  T411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1736.616136][  T410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1736.626236][ T3688] Bluetooth: hci3: command 0x0409 tx timeout
[ 1736.644195][  T411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1736.645318][  T410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1736.656892][  T411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1736.683140][  T411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1736.694862][  T411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
2022/01/12 02:44:18 executor 2 failed 11 times:
executor 2: exit status 67
SYZFAIL: netlink_send_ext: bad netlink ack type
type=41 (errno 22: Invalid argument)
SYZFAIL: child failed
 (errno 0: Success)
loop exited with status 67
[ 1739.260344][T15272] device hsr_slave_0 left promiscuous mode
[ 1739.276880][T15272] device hsr_slave_1 left promiscuous mode
[ 1739.286496][T15272] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1739.294411][T15272] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1739.327778][T15272] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1739.345071][T15272] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1739.359279][T15272] device bridge_slave_1 left promiscuous mode
[ 1739.375258][T15272] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1739.386252][T15272] device bridge_slave_0 left promiscuous mode
[ 1739.392560][T15272] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1739.430363][T15272] device veth1_macvtap left promiscuous mode
[ 1739.445375][T15272] device veth0_macvtap left promiscuous mode
[ 1739.451614][T15272] device veth1_vlan left promiscuous mode
[ 1739.465131][T15272] device veth0_vlan left promiscuous mode
[ 1739.955190][T15272] team0 (unregistering): Port device team_slave_1 removed
[ 1739.999587][T15272] team0 (unregistering): Port device team_slave_0 removed
[ 1740.030901][T15272] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1740.065636][T15272] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1740.257629][T15272] bond0 (unregistering): Released all slaves